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[oooi] &&mtts ^i??/v*? t —?<D±&&fti^z'h<D±i8mft&mw^^^>hm 
[0002] -jsohmftfflft&ffit*. ^j^^-v i -^<D^.^mw.wii<D^^hm<D^m 

[0003] ^p-^yhtX'fDm^'f&M^fe&fc*?, f^XffflCPt!: 

[0004] Hll«, ^<Z)J:5^^^hM^liEP^S^^V^fc^^>-hlli^liEP^V^A^IfePJ 
^Hli^fiE^^mi0^flJffi#30^^^^$nfc*J-^^— *{£*fL-CStt<7>Jl|R# 
fz-4^<>bMf¥$:MMVJlWfe, PKI (Public Key Infrastructure ;<2fW^S^)<^t.^T* 
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near Linking Protocol) {Cj;5^1*(^J^«, 4¥¥fWXlBklRTf#&m$:1&2&m o ) 
ft, ^^Hli^ra^ml0^<g(^f|Br*t^V^^LT1>^•r^ft:i!L-CSv^ 

Ffmw is*? A9io«, ^$c<z>$ uffl^-soo-r^^HiiM^iiE^*!-^^— * (^v^-fit) 

n n 

M N 

[0006] ^^y^^O^lCoVNTfi, ^^HWIiEK^SlOCD^iE^W-t-?) 

glo^^^*<^^^^#•r•5^^/5s^55tv^5rp^^;^^ti®^t^-cv^5o 

[0007] mb^McD— &%M&:1rZ>tz#><Djj&hW;m$}i>X\,^Z> 0 3¥<&ffXWl 
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Specification and implementation of a timestamping system, Technical Report of Uni 
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SEC/TR4.tgzl 

^#fr3t&fc3:A. Buldas, H. Lipmaa and B. Schoenmakers, Optim 
ally efficient accountable time-stamping, in Proceedings of Public Key Cryptography 
2000 (PKC2000), eds. Y. Zheng and H. Imai, pp.293_305, Springer-Verlag, Janu 
ary 2000 

#4#fF:£iSfc4:A. Buldas^ H. Lipmaa and B. Schoenmakers, Optim 
ally efficient accountable time-stamping, in Proceedings of Public Key Cryptography 
2000 (PKC2000), eds. Y. Zheng and H. Imai, pp.293-305, Springer-Verlag, Janua 
ry 2000 

[0008] UfiAJ&fihs #¥t¥fXm&Xf#¥rWX1fc4^M<D^mzm^ttl^ 

(DmmnK ^m<Dmm^mr^x4^umi^mmm^^b^tc^m^-^^ 
[ooio] *mwte. ±m<Dmm&M^ttfr\zt££frtch<Dxm.*M&&m^^x^ 
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coon] ^m<r>mi<o®mn. m^f^Mnm^^-r^^htDmrnm^^^ 

utimmmmmtK mmm^mmf-^, mmzmmimnkmm7 i -^^m , omx 
n^t^mmm^^T^mmm^^T^k.mmmmmmm^umm^ 
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w^m^mxhntcmtm^mm^&x^mtm^Mm^<Dv-y^^^m^ 
[0012] &&mv>%2<D&mte, Mfe<D^i?*Awn&±j&T^^h(Dft%tMiz&^ 

hew ^^sft ^fy^ b . mmmm mm&mvn i (Dmn^^^Mf^^ 
&frb\m?kM v us x ~&z.b izx^x—femm m b k i o^^a^^ti^ni 
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<DmtkMm*¥Ffeffin&^tsm 1 <nmw m^\¥^r^mmm^^ i r-y'^t s m& 
mm mm& mmm 1 comm w&mmn m mw& \^mm -tzmrn mwm^rvfh > 

mmzffimmifDmwmnn^innbfem^ m^mn<Do*>. mmmi^mm 

m&mmmikM%3*fab%inu ^-^mmmmK^^^mmmm^^ 
v~?h , mmmm mm&mmm<n&m mm m^m^Mm -tz^. 
mmmmmm x^y^t, mmmmmm^K mmmi<Dmmmmmm^ wmmm 

m^rvfh. mmgL&mmtK mzmmmm^mmmm^^mmmm^m 
(DmwmRxfffim&i <Dmw m<D mie m^^mm^ tf mmm 1 <r>mw m km 

— k iztti-x > tfriB^ i <d mm mmn^y^xm^ntc^m mm # t z. 
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(o mm w^m^^mm i-^ti-s m&m mm tt&m^&t t , m gam© 
^mtmmm^mtmmm^mn^mmm^mm^mm'r^mmm^mn 

m KDmm m^^it -t^m^mm m^it ^%>t , mmm i <nmm m& 
i <Dum w&ftf&irzmm mwfc^wt t „ ntjiESg i lefu^ 
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^.mmmi^mmm^mtm^Mm^m^mxt^m^^^xw^m^ 

mm^mmmm ^&t, zm*.. mmmmmm^hmmmwc<D^^mmmm^ 
mm «^tt m m 1 <&mm m j-*h-5 ^m&z&imir&^m^m 

mmmmm^t^Mmmm^mm^^^titci^mmmmmxh^ 
y-K (c*j-u-c > mmm i <r> g&m mm mm^mxm^ tvfc%&m mm m ^ 

ssu, mm^\(ommm(omm^(D^HmMtmum^^mmmwR 
^m^x^xm^titc^mmmm^m^^Hmmt^m^m^mm 
-rzm i <vmm w&&&&t , i <nmm m<D^^^mmmm %mm 

[0015] *5l^^5^{RiJ®«, ±f£Vfc^>hmf¥mm&W:<D&Xy"iy7'&Mn?.mmm 
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[0016] ^mm<vm6<Dmmfe. ±m^t^^hm^mm^^m(D^^y^mm^ 

s k shb -rsra^fs ^at, iu ibis i ©ews?** 5 *! v s -cbttfcttfiajiR^ 

i-5^^^^^7-K^clSi-5^•#^^t^^iBml^iiEf!♦o ; ^i^t*#i:^L'^ 

m^m^m^mm^mmm^mmti&mi-^mmto^mm^mmm^Mm 
ttzmv^x* mm^itommmtm—to^^m^x<o, ®.mto&&mmmm& 
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4 

mmmM<D^mmtm^mi<D^mmmmm^mzx^xm^titc^ 
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[0018] &mm<D$&8<Dmmte. mfe^^*^ m.^±^.-r^^h<Dm^m^^ 
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mvtzmm^mmm^xmmm2(Dmmm(om^mm^^mn^mm-i-^>m 
mmiR^2<Dmm^mmb.mmmmm^<Dmm<Dmm^^jt^xm 
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«>5 *>* mFiEjii^fi ms ^mw^MmMzmo ms -c tcm& i-*5v >xm#"5r 
{^tt^sy— 7a2^#jMs^a^^TbfcNf^-c^*sMiey— ^aitoii^M^ff 
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m^mmmmm^M-r^m^^^iwi-^mmm^m^mb, tuts 
x&zbmm&titcmww&^vymwwb-rzb, mm^KDmmm^it ut&i 

\^mmmixnm2<Dmm^mm^mmir^m^mm^y^b, zmm^ 



[0020] *mw<Dmio<Dmmfe. ±m<D4^bmftmx&m'7vy* : 7-i*zMft~rz>mm 
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[0021] [mumm, ^^hm^um^^^wtit^mir^mxh^o 

xfoz> 0 

[Bi3] m 3 te, #m m<Dm i<DmM<DMM i^s-Y^i/Hipm m ^^j^cd^^j* 
[05]i2i5{*, j&sm t-fflv N^^^*^^*^^tft^-r?>i2i-efo?>o 

[|2l6]|2l6te. fc&tfZ^>HMf¥^mmWW<DM&&WlW-$-Z>mx*h5o 

[|2|7]|2|7te, *$gm t-^v ^;n^)ii&^^7^f&HiE^£rf8, w-f-ZM x&z>„ 

[1218] 121 8 , ^c3S 93 ofg l <omte(OMfBt \zM&(*<Z'htiJ¥mm z/TfrJxOM'^Y 

m 1 2] 121 1 2 ft . W ^ 1 <7>Hi£<D^fi (C^^^WIIUMPJI '^fA©^ ^ 
^HR^IiE0J^SiE^^^i"SI2l^fe2>o 

[Ei 1 3] i2i 1 3 , $ <Dm2<DMM(DMM izm^^hm^mm i/*TJ*<D*/K 

"rJ>Mtimx-bZ> 0 

[t2ii4] 12114^, ^^m^2<DmM<Dj^m\^^^uwum^^TJ>.\^vf 

z^~^&t^&&<Dm&*i&w-rz>mx3bz> 0 

[I2ii5]i2ii5f*, ^^m<Dm2<DmM<Dj^m^^^>hm^u^y^T^(D^ 
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[g|20]|l|2O«, &mm<D%2<DmM<D]&Mfc&%4^>hMFfUffl^^J*(Dffi^ 

[|2|23]|2|23!3:, ^P^(D^30^(D^fC^S-r^Hl|l^tiEW^7 i ^-l'' < 
[g|24]|g|24« > ^B^cD^ScDlimcO^^^S-r^Hli^liE^^^^^ 

o 

[H25]i2i25te, &mji<vM3<DmM(DMnizffi%^>'bmftumi'^j*<D'('< 

[026] El 26 8IS<Z53Sv^iJUrtlcJ¥ y— K&ftMfcl^v*btofcJ|g& 
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[g|38]|g|38{4, ^P^<D^40^<^^^^^^^Hli^lEP^v'^-^^IJffl 

[|I|39]ia39te, #3^o^4(D^;!feo^ 

[B940]Bl40tt, *|§KO^4(D^O0fl|^#5^>'hJlRffliEWv'^^^^ 
[|24l]BI4ltt, *^^cD^40^0^{^^^VWHi^liEP^^v i A<D-r^ 

[|343]043«:, ^^O05O^©^l^S^VHW^IiEW^^WW'^< 
[H144]I1I44(4, ^IS^W^SWlllfe^^ilRl^S^^hMR^iEW^^I^tt 
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^^<Dmwfo&%ii-wx%z>^k&^-tmx&z> 0 
xmi (Dmmn^^wt m -r s m xh% 0 

r 

[|H49]|2l49te, 7fc&m<D$B5<DMM<Dj&te\z&M^>bmJ¥Mfti'a^lz35)t * 
m 52] 121 52 , K <D%i5<DmM<nJ&M i^^^^bM^Wtm j*<om$i 

m 53] m 5 3 & , #$8 m<n$RG<?>Mfe<oj&te ^m^^bm^mm far^asM 

ffi^ZjjiZK&tfZMMy*— *nfe^m<n— W&&W-fZ>7v~-*7' J r— bX&>Z> 0 

[HI54] HI 54{i.^K<^^50^ifeO^{C#5-Y^^Hl|H^liEP^^'rAWii^ 
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[060] 121 60 [3, ^^P^o^S^IIM^^^^^S^^^Hill^liEegix^iNOii^ 

•So 

[062] ill 62 [3 , #31 SH <Dm5(DMM(Dj^m K&M^YWWMER ^^©li 
[063] HI 63 fit, W <£> S 5<7>mSO?f^ ^S-f^O-hMM/^fED? ^vr-^jSfC 

[12164] El 64 fit N #31 W CD% 5(DmM<DMM iZM^C^YMftWR i^X-^AOiS^ 

co— 0>|-e&>5 o 

[|2I65]|2|65«,^W0^5(D||^(D^{Z:#S^VHK^IEK^^^^ 

[066] ia 66 , w so^ufioj^flg ic^s^^h iiiw '^fAOli 

[067]067fit. #3E§^fl50^;!&<DM^#^^ 

[12168] 121 68 M:, ^B^O^SO^O^^^S^^HllMffliEP^^^CDig^ 
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[069] 069J2. ;£3§ W <Df&5<DmM<DteMiZ-&&4'<l'hmf¥W&l i/^AOjg^ 

[072] 0 72}*, #38 93 (D^5©^O^f^^-<^Wli^IiEPJ A<Djgg( 

[074]074te. ^^^(D^SO^^CD^^^^S^^HII^IE^^^^jI^ 
[075]075«, *|SW<0^5©^jteO^^«5>f^^h^aEW^^<Z)ii^ 

[076] 0 76J3 % ^fefefflSiE'W 5 — X.^>\W^Mm^(D;v— MHW> tf**feSr^ 

[077]077«, fcs&a&rara^ffla^J&^y— 7©ioiu-c, tu^A^r^^ 

[078]078ii, &ZMmfflM<£>M&Mffo*<ov~7(Di<>k\sX, wi<DM$offlm<D 

[079]m79«, fc3&a&ffliH©«#$i#&*«>y— 7oiotLt> ^ro^^rapg© 



WO 2006/019143 



22 



PCT/JP2005/015085 



[|g|83]083{2, fgfE^Ol^/V.WiS^ggflE/-?;*/— Ktt, ilMffi^'^— ^£>3VM2 
[|2]84]I2I84I*, MtiEM(DU^VX'Oi&,^^siE^y~- jIMMt^— **>5VM* 
[g!85]085i*, f&fm^<Dl^/V£9^!l8fE'W— KHU S^tt^— **>5V Mi 

[0022] WT>^5^^^^^S^lll®^fflv^taWi-5o 

[0023] <^l<7)^Jg^^> 
(1 — 1. V^AWfifc) 

mm&faKKmffiir^ mm* ^hwk nmmmmf£if\^x*)m^h^> 

[0024] ffl, ^^h)iii^iiEPjv'^Aioo(Dv'^v i A^^ii^^^ s lMl— -efoix^^^^ 
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■r 

[0026] _k3$LfcJ;5 ^-<^Hl||^liE0J^^^§|312(i, Jli^^^^ffi V ^T^^^h 

m^'^M2i7i>b<Dmm^^\^t.n^^^-^^<^^Mh^^— Ufr*?Bf 

[0027] HI^^JTK^^y— K(y— :7&B&<) lc#J9M5Tbft5^ff^;fr8cte:, l^T<£>ii 
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[oo29] 4\ hih^^t 5 — *av— K(o,5)^#j«9^re>nfct#, ep^> )«#c»>*y— ^f- 

fiJt)^x^^^v'^e^v(o,5)-e$>st#, -<D^y-y=i.my(o,5)f)^^—bm= V(4,0 

mi>>^m^x^^>=um.(= v(4, o^m^-m^v^ r<£>£5&^jii^j:9v(o, 

$)h^ft&&%rtrZ><T— 2 {Z.ZVt&V(Q, 4), V(l,3), V(2,0), v(3,i))d^/v— Mfi^tf- 

3*-e#3t£. v(o, 5)n^y^mmi^x^—bim^v^-r^^ 0 

[(V(0, 4), L), (V(l, 3), R), (V(2, 0), L), (V(3, 1), R)] 
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[oo3i] *fc, 4-oh^mmmwEoc(y)izn, mmmni&^ftRiMvx&^it'Afflmm 
[0032] jisj, mm<n^nmwwEoc(ymft&iz&&x%zM&MmWKy s — ?*mi&m 

*o fcl*.^ H5fc:*5V^-cri* /-K(0,5){CtoT, y-K#J^Mv(2,o), y-KtM^te 

v (o.^ttfiPi^ffi^-^-cfcS^, /— K«MHKv (i,3), y-K#J^fifv (3,i)te/- 

K(0, 15)^#]^bn/cB#^^^^^#Rr|g^alMM^T f --^T*fe5o WTXii. « 
#^ft&j*y— :7#:-5§- i t£#j-LT, V(0, i) <&r.fc&$g<V(i)fc*<wfct>;fc3. 

f"l ^ fit) o^-C$rfiJffl#^®2i{Cjg^-rs<J:5 fcftoTl >S„ 
[0034] rrt, 07£I*JIRUC\ Jd&^M^— ?<Dftm^\^XM^<t&W-t%o 
[0035] I^i^*OloW!J- 7ttc*j"f« % t*93&^*i'* , b5— ooy— 7t'(cjo^ 

Sffi^— *CToken(t, Ote&<Z>±9{£/£tt£*l>3o 
[0036] y— Z7tfrbm&M#0*<D/l'— Y\ZMZ>s<**t<D/V— W^£ITO, tO/V— 

hJ^O/— KOJnLIM— Kd»6>**y— K©afclflfct0>fMiE><*OT.5( 

— ^tlcD#J^^T^e^a^bfc^^-^v^T#J^^it^^uTv^sg^o^lJ^auth 

PathD(t. tl)i:U ^ti*tll-S3»tStlc*|-J-Sf8BE/^tiif«55o -^^Jl-fJ^fit^W 
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[0037] J^±/^ib, authPathDV(t, t')W:, &mmWWEOC(y)\Z^*lX\s^£fa<>tcffim%: 

[0038] t'i>h(Dm'rz > im&M%o*sBT<D±)$.Mm (im^MmMm)<Dmrm^^ 

n^<Dm^M^)^SBT'<DV— ~7X&Z>b%\Z.^ authPathDV(t, t')\Z.mWkM^i^ 
SBTtCOV ^X<Dln1&<DZ*&&titl%o Z.<Dt%, CToken(t, t'M, mM.X^is bfc^T 

m^Mm^-<ojv— vm&%Y%-rz><D\z.-tfttm n^^x\ ^„ 

[0039] m*M, EI7^*5V>-C. CToken(t, t4')teal<Z>OTff $B(0, 3)^(D#]^jitV(al)CO 
jm((0, 3), V(al)) , m*a2 0^gffi^(2, D^Ogfl^it V(a2)c£>M((2, 1), V(a2))^ 
<bft5M((0, 3), V(al)), ((2, 1), V(a2))] £&£ 0 

[0040] j^r-m, ^mmwm^izti%MikMm*<nm^xmkm&&t>^%^k\z£v 
[0041] m.&mmft)&i®i4n. ^mm&mfcMmtt^&nvxzmmmfcmm-tz 

xmm-rzxtt^&ftotctbian, fg^us> mmwm&Kttmirzv— v (ni3 
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[0043] E&m&wmmw<Dj&&.&* mm^mmi^Mm-r^mmmmtm-xh^o 

[0044] mmmmw2m. a^\?a—#*yb7—?4^vxmm&Mi$s£xfm&3£W3t 

[0045] rr-c, 4^<>h)m^um^m.^24n, ^mmmm^\^xsiT<D^mm^iM 

[0047] *fc, iiEPJ^fil/&^ffi5^^^/^^^#^t^t^^^^^?E^^ 

[0049] gsii3ii, ^^°= t .--^ybu--^^^xmm^miisxx^mm^mm2\t 
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[0050] ^-C, >f^<VME^IEW«iilEaJ32<7>«te^ov^. ®5$rJBl>-ttft93-r5„ 05 Id 

o-CVV5E3£ffif#B\ _ki&Utiffi0, V(3, 0)*&tFV(l, 4)-efc5„ — 3u fljffl^g 
2itt, £2E5f3fcflf#fcL"t\ V(0, 5)3tt/IK»^WW^-^-e*>5V(0, 4), V(l, 3), 

*5«tt^V(2, 0)3ri£fl i-S^o-efcSo -tU3\ *Jffl#£g2i#tfefiE&#«>5P&£(BP 



^it^ pT|g-e$>50-e % v(l, 3)Sril^M^^-^i:br^Jffl#^ft2i^iiE^^igl*> 

[0052] r^T% Jt«tftIiE0^^5ie^#&*0/— K(05tJl*5V vttt, (3, 0)) 

[0053] hp*,, ±m<nmmz£ymm&mmifcfoz&nuwwizM^zm2<v&m&^ 
mm.3\^mLxmmr^n y m&mmww<Dmwm&t)m<o^xbtitcv— 
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7 vt. WM'Oh&m.mwnfctt-fzv 



[0054] m, sk±.<D&mmte. &te<thm»mmRvmfflmmzmtt^&&mmm (c 

PU: Central Processing Unit) , T/n^A^-r — ^^lRi^'r^^^-t"2)RAM(Ra 
ndom Access Memory)^b#5^fBlt^il(^y) , ^— K9* (HD) ^ 0>' 

#I£IKffr»3, £3t£«#ffr*SB14, «3fr?*-*Bl#*B15, fjf^m&tfetfmi 

^sgp32cD^a{i. ±iecpuic.t5^©Jl»atfe«^f-*^cto{c^b^ 
coo55] *fc, *mM<Dmmzm&&m&m%mfti- : 5yvjf7j>s\^ itfMut^fE 

*f^V, -7\s**S-J 'AST \ CD-ROM, MO, DVD-ROM^^O=yti- 

[0056] ( i - 2 . zsxTJ4toi¥) 



[0057] *i\ eis&^jsur. sf^hM!¥mwjjmtt^x®.m-r5o 

[0058] ^lJffl#^g2i^SEP > g^©l^^^-7 :f — ^ti'liE^^^^'ff HE 
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xy^SlO, S20) o 

mmmEoc(y)zmm-rz>(*Tv7s3o, s4o, s50) o 
[oo59] ^ru^, mm#mm2m. ^mmmmEoc(y)^mir^t^x^^ oxry? 

S60) o ft, S:aiiEP^#EOC(y)^{i. ^<DB#^:&^T&#T*#5BPI$W7U^- ^ 

^LT, m^mum^^^mirU^ry^sw, S80) o 

[0061] -r-<^wwra^^*^j§i5i2^, ^mmwm&frbttwzfot^&m 

^n^LT^^Bs^^MSSira^^s-rs^x^sgo, sioo, sno 

)o 

[0062] ^.tifcxy. ^mmm, %L&m%:mmwm*mn-rz>~ttfxzz> (*7^:/si2 

0) o 

[oo63] f m&mmu-z. jfr&utgmmm ^-rsiiMW^— ?m#:%mw$z 

ISfr^yT'SlZO, S140) o 

[0064] mwmmwffizzT-fi&nmste. ^<Dm^x^m^m^±m^mm 

#^g2i{^f-r5(^^S150, S160) o 

[0065] mm^mmm^ ^stM«i^-^^#t5rwstt 

5(^^7°S170) o 

[0066] ^u-c, mikMffi<vtctb<D-7£Mm mukMmmm) rtK*5wcwu ±&Ltcmw 
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S190, S200) o £<£>RU KW^R^JSCjEttSriftiiE-rsfeJf), W^fWA** ffrfc 
[0067] ft, |28{^-r-r^^HWra^-&^*3V^^, ^S^«3<D^d^SEW^Bl 

[0068] 09*#flabJfc*Sb, e^ttJfc^Sftfc^it ^^fflV^c-f^^hm^lIE 

[0069] , mm^mM2itt. s e^ra^ei^ra^tbT^ff 

d^Hi^^^<^A— (X7^:/S310) . 

[0070] #ci^ ^^o^^/v^ srttbTm^ ^(c^^^nxv ^pi— jg?s^i#^asra 

^^f5Ei--5(^^S320, S330) o 
[0071] £JLh©tfeSEfc*3l vr, ^5E^5t)*rtV^, gaSEW^^^^A/^tUTV^V^ 

&gAs£tix^z>zb&$m-rz>zk&-e$% (^xy^s350) o ctu-£<9, i*?a&££> 

,SaiiE^#f^m^)lR^»J7tcy~^#^T^^tb5JW(-^VNT^fT^n 
[0072] 01OSr#fl8b*ase>, ^S^S3SrfflVNfc^>'WiR^liE^^gE^fe^oVN 



* 
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[0073] mmmmM2m: mM^<om^u<oMW^^Mmmm<om^^f^- 

|ff|511^l-"CflJffl#^*2i{cM{f-r5(^^S420, S430, S440) o ^-£9, 

m 

S460) o 



[0074] #Ct£, 



2r#h^1-5 C*7V^S470, S480) o Jfcl vC. ^Mjfctt^b t <D a \c£Z>mtiE&& 
iH*U ^|E^Ofi]^{itAcal^m-^-r6 (^5/^S490) o -C^Hli^fiE 

{C— ffe-fS^^^^liE-r^ (^^S500, S510) o 
[0075] W_h(D^IE(-*5V vC, tWBE»C^5b"f-tbH:, gSiEit^^ A/£*l/CV ^£ 

efegx^avcv ^:^ilt5:^ 5 ^5 (^x^7 B s530) o -^ut, -f'^HW* 

aEweiE«iJ32M:, ^^^aE^*sr^sP3i^LTfijffl#^«2i(c^ffib, mmm 

mmn-i. £*3femS:Sfi-t"5 (^y^"S540, S550) o 

[0076] iixtciOx fUffl#^^2i«, *^W&*«H&^Ufc^ttHc:i8V v CI>, a£33§£ 
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®2U*> ±IB£aESrl?*bfcS:ai5EW*lw^JSi--5liEW5l*©»«i^, galena 

izM)t^^^mmm^^<D^m^^xh<>tc^t(D^m^^mM3^bmM 

[0077] ft*5 % ^y^SS^O^S^O^ft^l^b-C}*, ^fi^@3^§:{f LfcW^ 

[0078] (1-3. "f^hMf¥%£&J?8k) 

[0079] WTTi*. ^joM^tUT> 4^hMf¥m.Wi/x J rJ*l00<D-y-~¥ *Mtei% 

[0080] ^-C, ^^hJe*iEMtftBE*&*tftM«fc»^»od^^^^4-^ 0 
[0081] HI#;^J*SBm:}oV^-r, lotfV— Kptti^A4£i^/^©##i"C^U£*t5 

KpOV-^/Vt^-^-^r^^leveKp), index(p)<k<f<o 
[0082] *fc, «g^*b*y— 7##i^«»J$*^«l^^*SBT©!;-7S:leal(SBT, 0, 1 
eaKSBT, i){dllI^»iJ^M^* l J9^TS7ct^ofc|iE§g^*:^#{t-C^y-7{C#J 
^fltSr#J«3^TS— jgO^a^y— 7lCft5Ml7!7>'Ki:fV\ round(SBT, i) 

[0083] JB#c&iKj*t£l*. ^£ft;/aeteoa»fcte*SII»U##&tt^U ^h*IWWfc*& 

[0084] ^mmmm^Mvxn, mfc^*&^tffi#&&*y~7&^ri**w j *£ti 
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= <hi, ii), v2 = (n2, i2)©ra©«^*sf*^aiBJ*«rfflv^-r^gii-s. ap*» v 1 

< v 2ttt, nl < n2, *fc{*nl = n2 2>>0 il < i2 0>Z.bbfcXttZ>. *fc v 1 ^ 
v 2ifcfc, v 1 < v 2*fc« v 1 = v 20>Z.kbl£&r&c v = (n, i) ?M 

= leatfn. Qfc*-To leafl v ])—-7v b^-^bhh^O. leaf( v (*>5 

[0085] ifcfc, &5HI^*^J7tcSBT<Dy-:7leaKSBT, QtfloV vC, ;Ltf>Ag&&fa*SBT(&y 
1--5B#£iJiVM/\ ^tb^rtime(SBT, i)fe6V^^ffi^^time(i)t^i- 0 leaK v )K 

e(v)t^i"o 

[0086] fiJffl#OT2ids, E£3£B3«r/Bvvt\ &Sg3iiF.§l3#K:^5aS2<z>tfcIiE£:^fT 
BteU j^T»3o«5*#(l)~(3)*Sfifc«3S:X«r+^*>5o 

[0087] (1) &&mm(o&®^&& < z>mmteT£<0'}^ \ 

[0088] (2) ^^^e3{^«t^SC(^10(D^S^$r a , 3fctf>£3lEj£& a 'b^Sb, 
time( a ') — time( a ) ^ T 

[0089] (3) fu^#^g2i ^y-^msu^ r ©wg^w^y-^-csaaEM^srS 
m-rz-bbu 

time( x ') — time( x ) ^ T 
[0090] ft, -nbO^O+^OSft^PUTf*^^i-5(^^«>^*t^teW30 
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(1)£(2)&#J80. 

[0091] mii\z^&5t£hzmikMm*sBTfcmirz&&mw3<D^£& « ki&^t, 
[0092] ^tu;^, ^mnm%£&& « vtc^m^mmmm^umm^'f 

[0093] mmmu^m^t^smm^Mm^i^xm . ^mmmm^^ ^xn, mm 
[0094] z.<Dm&Mt»sm&&m^tit£. ^•—^Mt^tM,<Dm^m^^>^x^m^^i 
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coo95] ft, ^mw2&gi&& a x&nvtz^m&mmmm^m m&x(Dmwm 
[oo96] tot, ^lonjteo^flgo^^Mi^aEw^^AiooicitLH!. mm^m2\ 

•So 

[0097] ro^m, S3SEW^jEy3te&tftffiT^fc£#teWu fEBH36«lte*5tt3£3lE*t 
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[0098] <^2<DmM(DMM> 

(2-1. isx7*mjiQ 



[0099] m2<Dmm<Dmm^ mi<DMM(DMMbm£mm<D^TJ*n}$xfoz> 



[oioo] *fc, mi<Dmm<DMmtmm\z.m2<DmMMWi\z$5\,^xh. -r-o-wduww^ 

j 



^mz.w%&%-z>z-tb^mxibz> 0 
[oioi] mwmwiz. ^t°~~?*vhv~?4%:ifrLxmm%-mw2iRxf%£ 



~^<Dm^m^mm^mmi.mm^mm2i^hcom^^bL-xmm^ritcy' 
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[0102] ^mmt&mm, &&&&\z&i?z^m%mmwm&mikM% : J*frL>®. 
m^tz^^m^mmmm<D^mmm^-^m%^x^m-r^>x^zf^x 

[0103] gS|M8|J, ^K°~—?^yh7—?4&$~vxmw^w&£x$Mm#mm2\t 

iftszzmirzmi&x&z,, 
[0104] -f^Hii/^tiE^g£S!fB82j*, mi(DMM<Dmm(D-f^<>hmj¥mEm^^m2(D 

* 

o 

[0105] WTx EH4^#Mb^^ x ror^- if^<Dii*{RiJ^##ftJ^ov>-r tfteg 
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[0108] flJffl#K«2ifcfi£S^«8tt, ^KDHig(D^-e5^-<fc^#(l)~(3)^ 

S&fcl-fcOfc-rSo t Sr^iJffl#|gB2ilcJ:Sa— tf^-e, T ^ time( T )&ffitc-th<D 

t~fZ> 0 T ^ time( x )t\^4kWii^ ±J&(D0kW(D t IP 

[0109] (i)3pjffi#$ig2ws3.— ifjfe t •effit#ufcS3aaEW*(«s*^3Ki*y— 

[0110] (2) S*Sfi8^Jffi#3S®2id»fe^$nfcSailEW#l^*n5JK»:^* 

[0111] (3) iaE|g«8tt«'&^*l^*ff B0aS*8H:fi0E£ a 1 {Zttfo-TZgi 
[0112] (4) &*3£B8ttu SSEA a Hi^fS-TS^SfflMliE^^t^tVt^i-SilE 



WO 2006/019143 PCT/JP2005/0 15085 

40 

[0113] (5) ?&o-c, &%mmt£. mmmmmi^h^mutm^m^})--^ * iz-Mfc 
%mM-rz>z-b&x%z> 0 

frbmm &titci%MZt2'b&<k, tl < t2' <bi^£re&5 0 
[oils] ~~-e,&m&<DBmzio\,^xh. mwmm<v&Mk"S1feV£fei%ajE£tiXv^ 

i < t2b\^bh&wiixz% 0 u±.frb. mmmmi^-^^ * nmt^gi 

irmm^mM2i<Dmm^-^<D^Hif^mm^ttixh^b^mm^nZo 
[oii6] t2'm&*x*(Dmmwm<DW.mk^m&$:&m.L,xh, mmmmm2i^m 

[oii7] u±<D&mwte, <i?ft<bhmwmmRxFmmmmzmtt*&mmmm- (c 

PU: Central Processing Unit) , -fxi^yK^f— ?&UMT&&ffe& : £-fZ>KAM(!Ra 
ndom Access Memory)^^S^IBti^© % K?*-f** (HD)^<D«M 

^^^M8mxf4^bm^mm^^82(D^m\^ ±mcpvizxzmw- 
[0118] *fc, &mm<Dmm\z&z&nj&m&nff-rz>7'vy ; 7J>.te, m^vtc^mm^m 
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=T47.t, CD-ROM, MO. DVD-ROM^t^^V't 0 ^— 

h~*si&xfoz> 0 

[0119] (2-2. V^^lbf^) 

:2i^^h^mmmm^ML^xm2<Dmm^nomi^m.m'r^y— t-^mx 
[0120] *i\ mi5fc^^>hmftmmjfm~<>\,^xwiw~rz>o ft> ^UMcoi&mz. 

X&V. |2l8<DX^7 o S10~S200^, |g|15(D^5/^ P S610~S800tl^— "C, ^CO^ 
<DXT^S810~S850fimtclZ.i^\\&t\,tzb<DXfrZ> o ^ot, «T-C(i^OjI^P$ 

[0121] \m^M^<oiusb(o~ feMfflAmrirzb, mmmm^^mp^mm, s 

810, S820, S830, S840) o 

[0122] rtU-J;^ £SESIiS8l4, #£*J8§SiJiEW*©^£ii3Ett^— 1" 5 
(^y^S850) o 
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m^n\\z.mir^m^m\z.^>\^xmm-t^ 0 *f C , *yjB#36fi2w>8fitf>tfe8E 
[0124] f uffl#^©2i«, ^^^^s^siei^* emu gpn#«7£x— ^fi^- 

*nTVN5)^tf^^^if^^^S^©8(C^f-r^(^^S910, S920) o 

[0125] ^mmiz^ismizifrL-x^m^ ««rS(t i"s<^ ^-^hw* 

mEPJg^lH$82te^Jffi#^g2i^^ 
:£ a lfctHf-TS C*7^S930, S940)„ ^bT, iOES^i a KD^MgSfE 



[0126] !KV^e*jjk a l^y— 7 t te<fcS»SE^S:t|-|rU B£S^ a l«5g£SffiMSEW 

(^y^S960, S970) o — ^^MIS^aEMSfiSB82H:, ^«*tf 

#i:L-ruE t-^itixoTv v&gmmm worn mm^f—^^^u^m m fit 

— Sti"5d^»S:«MiEi-5 (^y^S980, S990) o 

jgaarau saajsmsrSft-rs^^sioio, sio2o)„ 
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[0130] m2<DmM<DM1&<D^^hmfrUW^XT^200iZ£tl\^ mi<DMM<D 

[0131] (2-3. ^20HJg(D^fliO^^Jl) 



0 2otf)flJJE#^2at2b^#* % MlkMmKV— 7 zbz l^&WTglStiE 



:8#s z b x KD|fr^M^5r^i--5^{-^V^12|l 



[0132] .WT, )Wkmmif-(0^—-y t , t lCov^t, z 0&v>{* t Douf^te t (ifevMS 
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filOjlt^HfcWlllat^d^IE^frtTV , *5 1 {>£>i;"t"5o 
[0133] ft, 5pJ^#^iK2a&'a«2bi:SS^B8H:, *Mft&l<DMM<omWL<Dr 

■M^-St©* a lib-C, ^r^-rSC^^SlllO, S1120, S1130) o 
[0135] SSE^a to K^NFF^^HtfmSrJttSe-rS^y^SlHOo ^*Ui, €-^C 

[0136] a < oc\(Dt^n,mi<^Mmmm<Di^—^M<D^m<^m^-Hn]Rri± 

[0137] iftte, Tl^U>A*{^flS^5S*a6e8<0«^^ottefCiifc«-t-5t 

^SfclCj:*), a 2 ^ t I^$tt50-C, £JLhfc!), t < a ^ a2< t1 t/«C«3, t" 
< r 1 dS**»ix5t>«)"efc5. 
[0138] al < a<£>i#i3\ tl < z a^£*L5 (^y^Sl 180) 0 

a = a 1 ©i#tt, th l©MmM^OTOtt,^TO#JlI(l)~(3)t^o-C 

=fTfc>tt5o 

[0139] (Dfij^#»tt2a*s T i^eoiiM^ t '-e##-t-5tii#a»e>=-— « t <Dm. 

KSfflSSIiEM*^^*ix5fiPl*«^— ^(c±8E»SE^<0#J^«*s^*n-CV> 
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[0140] (2) mrn^. mm^mmbtf T lt^mmw^M x r-eix#-r&ii z kd 

[0141] (3)n > nl <Dt%}*. g^g3£«8H\ fUffl#^«2atCj;5^--if^ r 

M2b(-£5^--^ t 1 ^^^^^^^^^^^^^^^(^^SllTO),, * 

[0142] t£oT, I2©^1©^1©»J1 M<mtf, n2<DmM<DMM<D%}&izMz.X 
[0143] (2-4. ^2<D^(7)^(D^^0il2) 

xhz> 0 ^.(D^t^^^m.sKx^m^-^.^it^^— He^SEjt^o 

[0144] r^Lfi, Ell8K:^-r£5f£, ^^68^, Jli^^^CO/^— Ht^th^b, fh^b 

, 5EB^^g7^«t5^iE^ff^ttTV vfcv ^* tSr^liE-rS^O-efeS (^X^S1210, 
S1220, S1230, S1240, S1250) o 
[0145] */c, ^^®8{4, ^(Dm^l£iklZ£%/U-bm&m.]<DMm\Z£i9, fiJffl# 
^S2i^^(^^^*^^^^S^^1t^OjE^ti^IiEi-^^<b^-e#5 0 

[0146] 0g*.fcf, fo%m&Mm*SBT<DMlimTm^ ^Jffi#^B2a^ > y— 7(0, x )0#J 
^fjfSr**c^#j^^itV(T)^^S'J^fitv' i'&^U #i^^v'^ V (root(SBT))t^Ny^ 
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[(v(0), LR(0)), (v(l), LR(D), (v(k-l), LR(k-l))] 



a)^^:*3V^r^^e8fc^#$i^fc:p2<of!l^'^iiv(p2)i«^^So — ^r, g££3£«8 

{4, V(a) 3&»6>a*U authPath(a)(CjR-f-5/— K©WS«Sr^^VaH«h^'j;Oy 
^^i--5'tf^J;?)V(root(SBT))^tf-#i- ^>o p2«authPath(a)^Mi-^^X% V(p2)t> 

ifc&£M\%(n\^x&z> 0 ^-e(^±Mta-e#5?fe^l^v^-c)v2 , ^ v(p2)-e 

[0147] t^oT, ^2^^ig(D^(D^^j2(Cj;tL^ % ^2<D||JgO^(^^J^:f^PX.-C 

t-#5o m.^mm^—uwmmm^'o , iiETO©i&u^ij/E#^©2io 

[0148] (2-5. ^2tf>^i£<£>7f21itf>^i^j3) 



[0149] 111 19^#^bTM^T ? — ^Sfc^ffcfcoV ^TtfeB^-rSo 

[0150] HI19{^V>T, S3iE36B8*SgSat^a<Z>^±«I^7*— ^Sr^fo/jCbfi* KSfe£*t 
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[0151] ft-ff/jJbtf ; 12119-e, jlte^— f^utD^S^aiaS^OV^Vtfct), 

[0152] ^ijx.^ 'jkmmm&immtu iBm<D^mw8('j?t£<thi h jc-mi^it^ 

[0153] ^{C|H20^#RiL-C, 2o^±(D^M8i(i=a,b,n)^U-CflJffi#^m2i^^ 
[0154] CtDi^flJffl^m^^atEBJ^^tbfc^^, lB#F^_kSi®L-O0^ S§ 

[0155] ^o^tli, ±|B^4KPl?r#^9Mbffiv^^^[cj;^5^^t^So *"f\ H^M8a<D& 
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[0157] <^3<75HSgO?f^> 
(3-1. i/^J»mj&) 

^®^v^)ioj(j= a ,b, -,n), m&(D^>hmftmwmm#mm&^Mmwmw:( 
sir, mm&gzU mnmm^u) t\ ^) 201 o= a ,b, -,n) , ^-^Hii^ra^ 

m^mmm^iB^xw^x^^o *fc, ^^©20^ _hfeis^jssfiE 

^-*xfe&&mm9\z£z^&ffi^c£<>x%mmwm*&m~fz>z.b&xzz>b 
bh^. ^mmmmbmM^mmmm^Mi^Hnhtix^^<DX\ mmtitMrnz®. 

[0158] ^ *mn<Dj&niz&\,^xte, ±mmm<Dmmbm^m^Rxfmm%:m.mu 
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[0159] ±m^M<D^mtmm^ $&3<DmMj&mz&^x%>. ^>hm^um^ 

[0160] ^J6^B(e:*3V>Tfe>, 0io^*fe^BtlH^{c|iE^^Bi<©jiL^Kt: 

[0161] ^jft#ji««90(i, jEm^mmmm^uwvx. mm^mmi^Mmmmm 

[0162] fiJffi#OTl0jtt,fiJffl#361B(^IE^^IB)20i^^(Of f ^yV'^— 
[0163] 3Wffl#3Sfi(NP*ISiEM3ee)20itt, ±^Lfc«t5^flJffl#^m2i(75^{C^JtiE 

2i,mm^mMioi^h(Dmmmm^^nH^xmM^mmmw^i¥^'f-^ 
tvxh^\ 
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[0164] pixte, n?fMmwftf&U202^ mm&mmofrbmmzfotz.ffife^y*^?^ 
[oi65] ^^bm^mm^^odn.mm^mmioi^^Mmmmm^M^xi^ 



[0166] ^S^g9te, %iicomi&V)MM<D%£ 



x<Dmm%ffix.xi3V, pu<(i, ^>>K o ~—?*vby~-?4&jt-vxmwmmi. mm 
-5c xmrnnte-mizm^xi^ ^^hm^mm^mmtvx\t. ^>bm 



L-XhX^\ 
[0167] Era^JHEP^iiEf^«91», 
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[0168] ft, W_hO^^{i, ^<^^^^S.U ? ffilJ«^^^c4 I ^S^© (C 
PU: Central Processing Unit) , /p^^- ^^JRi^i"^HgSr ; i"i"SRAM(Ra 
ndom Access Memory)^ J^bftSakiStt^^ (^10 , Kv^^ (HD) ^(D^M 



5, afe^t^^: 



:9£>fEttg|592te, _kia±iStt^e&3V M22&IE 



[0169] ^^O^ffi^^^^^a^^tTi-^^n^^fi, fil^bfc^feltS® 



7 s <i^?, ^V^^/Vt^X^ CD-ROM, MO, DVD — ROM&<!f ^t"^.— 
[0170] (3-2. iy^Alb-ft) 

[0171] ft, 4^h}mf¥mwj>mz&\ vrwu mm&mm mmmmmm 2o\^Mmm 



:2i, ^ 

BI— e£>3fc#>, M&5ftf^ft5*iJ/B#£em (R#£Jra£iM) 20i<!;f Uffl«egl0j 
^O^iO^^P^^tfeB^i-So r^lt?, El 20^^121 2 3 fi, 1218(0^5/^310^ 
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«^^^:/S120'&#L<R91*f-*$'— ^^H"C*>*. 
[0172] *fc, >T^<^ie^iiE^*feiiE*ifeOfglO«tSEfc*5V>-C«:, fiJffl#^g20iSrfiJffi 

So 

[0173] *t, m22&mmvx. ^>hm^mm^m<D^-<^hm^umm^mm-r^ 

^y^SlO'tCoV^-CUiK-rSo 
[0174] $1Jffi#^»l0j dS3flJffl#^B (R#£'jraM) 20H£^*/V'9 f ~**^tf 

j 

fVZiv-f— ^fr^tri**!lliEWi!**Sfil't-*(^7 l y^Sll\ S12') C #cKi, fijffl 
(«JSE^^e) 20<^NP*JBEWf^fiKSl520m, P#2?JtE^^£gfBbfcP#£!) 

MSSrf^fiKU^J^^fflOjJcSlfi-t-S^y^Sia', S14', S15')o -tU^, 

[0175] ^Jffi#3giS.(i**IBEMKB)20i<D>f^>'hJe^liEW35*:«IJ203W:. R^Jg 

ffcU KW3611lte2Mt«<*^:7 p Sl7\ S18') 0 ^©ISI, SEMSHtitt, i£g 
[0176] ft, ±^Lfc^&{c^v^T«,fiJffl#^®10j^^J^a|EW#ff{t^Mfibfc 

[0177] ^Slcfcl^CH:, ^y^SlO'O^^Wfi^fiEWIlJfex^y^W:, H#&IMtiE 
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cons] m^m24%mmvx^^m&muww%%:it~rz>^ys*si2o' t^ovvrta 
w-tz> 0 

Cong] i^se^ m&m mi^^xmmmmi^m.^m^mmmm^m -tzt 

* 

&mmwwtttfctttfxmmu93{zmM-rz>(*y i iy-7*si2V , si22\ si23') 0 
[0181] &mm9<D^^hmf¥mw%&M32i>K mm#mm mmmwrnm) 20^0 



rfl«jra»M^m^fe5(^5/^S51l' ( S512', S513') 0 
[0182] tfcoT, m3c^^igO0^^^^MlI^mE^^^3OO^J;tlfS, ^lO^JSO 

|gff(- £«9 , 7£5km(DMR<D&fM ftl% J l-X.Z>Z.b &X%Z> 0 
[0183] (3-3. %$3<Dmi&£>]&Wie>&J&ffl) 

&&mmtL.x(Dmm%ffixJz^mm9' ^m^^xm^m^rm^M^mtx, 
[oi84] ^<Dm3<Dmm<Di&n<D : £Mmiz.&;\,^x\^ KmmMmmmYf^9V f*. 
x, &mi%Mmwmiztt~r£5izt£'DX\,^ 0 tot, ^3(D%mo^m.(n>^Mm\z. 
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[0185] zLthte, m2<Dmm<D^mx'm^<tM^ ^^mms^m^^t^^bm^mmm 

[oi86] *fc, ^3<Dmm(Dj^m<D^nm\^\^x\^ ^t^mma' it, rmmommmM 
ttztitc&mmnmmmxfoz ^3<Dmmmmmmmi &&n-rz>^t&»smxh 

w-tz&<Dx&z> 0 

[oi87] m3<D$m<aj& : &<D&j8wtLx * ^^Nii/mw^w^oo' mm 
ir^^>bmm^ummmi9\zm^ir)^ir^^jsm^.tL-xi i x^\ z 



[oi88] ±mmi&<Di&m\z33\ ^xmmmmm -aKon^tb^w^umz.^ ^x\t^ 
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[0189] {^Wk^m^f^i^r^^m— ©W#€r^r^f5o 

[0190] (2)±feis^c(D^^7 i w^o 5 &^ ^fffe^^o^r^ir^-e^So 

[0191] (3) ifBSffeo^i^-f^-f 3&s^*i-5W«S:5t1#-rSBEl^ W^H^tc 
[0192] _kfB©S#<z>5t>* K#(l) KoV^JS, lt©t-k^ii^, fc5«BBB©ffif.# 

[0193] 5# (2) t:ov N-ct*. m.$E£<nRL>x\, ^WWWiZ£yffimUfc-t~Z>Z.tfc£9m 
[0194] 5I# (3) tov vCtt, S#i~5if ^{c*j-u-c^§i«iBff^^:t-S<3<7 ? ^^S 

<Z>^T3M£3& S * ^KHfcSEW*, CRL(Certificate Revocation List) , OCSPf— \?X (Onl 
ine Certificate Status Protocol) 4$&ffll'»X'^IIBfcS£KPKI: Publike-Key Infrastruct 

®&&&W^<5tfZ>Z£fr~*imbtj:Z> 0 &Z>* — -<TKP1 = (SK1,PK1)£ 

gfbV^ ?TKP2 = (SK2, PK2)M#^x.S^l-> KPl^^fe^rfl^KP2 

[0195] W^^^tLTiirP^^^^^^r^tff^^^-r^cir^tf^tu-r 
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[0196] <\m#:Mfo*<vM)&&£TJH±M:> 

[oi97] (m*mm) 

j=0,l,--- ) k) (DS—Wm*. 2 <k ~ i> XfoZ><DX. U^/lsj, K^rO.Oir^i"- 

i = 0, 1,— , 2 (k_i) -l^So 
[0198] £TF, ^SCxKMVXs ceiling(x)£x^_hOg/htf>S£$U floor(x)&xSXT <Dm±<V%£ 

[0199] /—KG. 0 U&U j < k)<Dgitt, 0 + 1, floorG/2)) -CfcS<^-C> 

parentO, 0=0 + 1, flooKi/2)) 

i^-T-So /-KG. 0 M&U o < DflXfcffiOTffcttU-i. 2-0, «'J^ 

WttO'-l. 2-i+l)tfc5©t, 

leftChildO, 0 =0-1, 2«i) 

rightChildO, i) = (j-1, 2-i+l) 
kfeS-TSo «&k<aMg&^$J*<7V-KG, 0(0 ^i< 2 (k ~ i) )cD/W-|w^r 

tPathkO, OCA- KG. 0*»e>^— M£S3/— K^JSrV>9)«. 

rtPathkO.O = [0, Kj)), (k, r(k))] 
k$ftZttfXZ% 0 f&U r(0 = I, Kj' + D = floor(r0')/2)(j'< ktU rG')imM 

*o-cv^t><Dti--5)-efc^ti-'So fSU (k, rtk)) fe, MlkMlfoKn^-h&mu ft 
[0200] vo, Ote/-KG, OcofJ^ffi-efc^o v(o, 0£v(0t#< o l&tl ^ kft5#:Hl£*^ s 

* 

SBT^Jl-r5W^VL<Dfe6/— Kp^fc«9, B^p&tfp<Z>^B^k#3SBTtf>gB#^ 

7 TV ^~bkJ£.mtZ>o 

[0201] B/^SBT<7>g|5#7|c-efc5i:^ leafs(B)«BCOy— -7<DM^^Th(0bir^> 0 &tzX& 
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[0202] 2^><Dmmi, i2 (£oVv-C, [il..i2] ttil ^ i2/«C*«»»»b/iS^'&(IZM)Sr* 
L, Cl..i2)f2il < i S i2 3&«ME»i*»b*:S*'ft-(l2W)ft*U Dl- i2] ttil ^ i < i 

2t£z>mmfrt>tez>M&(\£m)%mv, ai..i2) ran < i < i^saEftu^^^ ( 
[0203] (yfflk$m*<nmf$.3rm) 

[0204] (#l?U;f liifffl) fc3M*tt^^MW^llK#^#fafca^#»fc 

ceaingdog 2 (N))-e*>s„ MZwMlkMlfo^V— 7mXM*X*2 k X*fo%(DX\ d = 2 k - 

/— K/iU-Cy— 7jC#J?)^-CSrfc*Snr^tJ5c5o otitis Us</VQ<DV—7ft2 

1&m. 2 k -d = nbt£Z>fchX*&>Z> 0 
[0205] £TF> L1W = 2 (k_1) (U^<;V\(D/—Y<omW0 , L1L = 2 (k_1) -dB^rr<5W< 
;V\(DS—Y<DmW)<7>. LOL = 2(2 (k "°-d) (WS/WNDy— KOiBSfc) nffi 

<75-r-<vHi|ii7'liE^^*<Z)5*>, ^JtfxDLOLflSSri^VMNrga^L, 3WSrW</Hfc: 

[0206] place(i) = (0, i) (0 ^ I < LOL) 

place(i) = (1, LIL+i-LOL) (LOL < i ^ n) 

place(i) = (W</K %r^)Xm$&frX\>Z>^<DX$>Z> 0 
[0207] E|26te N mi<DW}^M^}^<Dm^W:<Dn = 10<Dm&<D Mtfcm&mirb&X' 

^0^-a-^*5V>Ti*, H^et^-Tai^ k = ceiling(log (10)) = 4£fct>, i«£ 
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fe4XfrZ> 0 ^L-X, d = 24-10 =6-efc5©-C, 6X2=12ffi<7>W</M)<7)y— 
3ziTZ> 0 Z.<D%g&. L1W = 23 = 8, L1L = 8-6 = 2, LOL = 2X2 = 4fcft3o 

ox, w<AOtf>y— 7dS4^H % u"</n©y— :7as6fa-e, y— ^co-g-tf-^crin = io£ 

[0208] •02Oj«^^J*<D^|^j5fe 

mm mikMmnm) ^n^^^hm^mm^^m^ux^^^b^. 
[0210] ^(o&m^ffitkmmttmf&rzkz . m^mmmm w*.tz* i«kd Kgf+- 

ftfc-f'Ohlli^liEP^^sR^^^Nti-St^ JlI#^fc&l*£<D,ii&k{3\ k = ceiling(l 
og (N))-Cfe5o i^^kOM^A^J^y— 7m$Mi±X2 y X3bZ><DX, Ofrbn- 1&X<D 

2 

nfla(D-r^^HlI^ra^^^^^V0CO/— K(0, 0)d»5>/—K(0, n-l)^#J«9^-C 

[0211] l^/VOfC^J^TbtLfc, K(0, n- 1) {C^UT. /V— W^rtPathk( 

0, n-D^S 

rtPathkO, 0 = [ 0, r(j)), — , (k, Kk))] 

* 

[0212] (— rtPathkO, 0 W\ rtPathkO, 0 = [ 0. rip), (k, Kk))]i3ES$*t5o <& 
U jl e [j..k] CTLT rOD = noor(i/2 0,_,) )ti-S o #l/^j(j = 0, — , 
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k- 1) {Z.*5V vtfcJU J^TO^t^9Sro 0 
[0213] zQ&WNUDb*. /—KG. r(j) + l) Htf^— /— KfcfcD, 

r(j)+i < i < 2 (k ~Vj:5;8-i[£*j-L-c, /-KG, 0 tt^&fvcv^ 

[0214]. KO^iSHIfeOfc*, r(j)+l < i < 2 0l " i) i^6^i{C*J-LT, /—KG. 0 l*?B*&h/tV 



[0215] &±<D£5t£&mz&^xmf&£tizi&iik$&fi*fc. — /— m^v*^ 

[0216] g]27,&XF IH28{4 % m2(Dm^M^^^^^<DT/V^V^^mirh<DX^ 
[0217] • K = ceiling(log (N))£-T5 0 

2 

[0218] 'n^Hnt^^hm^mm^<D^^irm^mit^ 0 ^mm^oxh^ 



[0219] .k»^ftbnfci^raraiB* s ii*Tufcfc#oj«»^^7ic<z>ift$^i-^^*. 

[0220] • (K+l)l®0#?:/^?IJ<Sr, i0, iKti-^o rrT\ i}<D%Jfflm-£0XhZ>(}=0, 

•••,k) 0 ijttv^</H^*3v >-c> mz±$.zntz;— F(D%c&m~rtm$fte, mzv~< 

[0221] • (K+l)f@W— /l^$t(D?»J£\ bO, — , bKt-TSo ^"C, bjCOMftfttfalse-efc 
3G=0, •••,K) 0 bjf2, 1"</Wj{£^ — /— Ki&S&Si&vgflvS^-f o 

[0222] • (K+l)«<??ia^JO^|Sr, AO, -, AKt-t-5o #IE?Ute, 2 (K ~V);g:££t*>, 
jVV-K^#J9ttttbft5#^{&fH-3 0=0, -.lOo 

[0223] -rtt^— • s—wzmmxzyK~-m&i%ftirz&mx'2bz>o 

[0224] • R(j,0 ll2o © 5 1 Sfci, jfc*tLT/- K(j,0 t-#J9 ^ TS^t^— -ftt&tf ^"T 5 PI 

[0225] -x, xO, xl, x2W\ /— KK#J9^T5'W3r^-r^^t?£>5o 
[0226] -xl || x2Hc, f>h?U-C^$tufc2o(Dfii:^3S^-efeS 0 
[0227] -h(x) fixOxNyi/^fli^iti-S^SlI— ^ffi/>?i'aHft'T*$>%. 
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[0228] z<D£*>t£fem<ni>£. m27<Dmm^Mi&teTttk(W%ffife<nM&MfoW\ffl 

[0229] |2]29te, ^2(Dfb^)lI^*^7»C(Dm^^^n=90^^cDj f ^J^-ri2IT* 
„ k = ceiling(log (9)) = 4^9, M£te4<&MlkM%}*&Ml&~t'Z>Z.t\Z.t£Z> 0 ft, 0 

2 

frbn-l$i-?<Dnm<DMfrmW&&tZ. tUM^MUZJ®* BEfcV— K(0,0), ••, (0,n 
-DKSW^TfcJvCVSo *fd, ^a^Mn-J:«9, i0 = 9, il = 4, i2 = 2, i3 = 1 

, i4=0<bfto-Cl^o- 
[0230] rOD£#, &LS¥Jll2£>(2.2);^ K(0,8)£V— h^^rtPath4(0,8)« 

rtPath4(0,8) = [(0,8), (1,4), (2,2), (3,1), (4,0)] 

[0231] l^/WHCiaVvrr*, ^^(2.3.2.1) J;«9, K(0,9)j&S^5— V— KlEfc*. V 
*</MlC*iVvCW:, (2.3.3.1.5) £<9, K(l,4) t^HttaSSWfl-ttbtU (l,5)tfS 

^ — KlE*5. l^/^Klcfel^Tte, ^5/^(2.3.3.1.5) /— K(0,2) [^S 

*S«9#rJ-e>*b, (0,3)tfS^ /— KfcfcSo W-</V3^V^-C(i> ^5/^(2.3.3.1) 

K(3,l)^tdS#Jt)#tj-btt5o W</Wl£*3V^tt:, (2.3.3.1) \Z. 

£<9, /— K(4,0) lC<K^S"J9#ttbtuS 0 

[0232] z.<DW?k. m29^i-x^m^M^^^vy^M^m^^t^'c^ 
[0233] ±:&<Dmi&mm3<BMM<Dj&i&\zft^xn > m&Mffi*n msoK^-rx^K, 
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[0234] SP*>, ±&mifo<DJ&1&[Zi8V^^hl&ftmm$'XTMWs 200^.1^300}*, ± 

[0235] (miiE^^<7)^a^ ; etLfcJ:5/v-hfi£ofh»&) 

[0236] W$&W)— ^#^^^ii^m(^ OX^o-cy— 7O^:^m+l)C0<t#, 

k (m) = min{h|m+l ^ 2 1 "} £33< 0 

curSBT(m) 

[0237] p = (j, 0 e curSBT(m) £U p^curSBT(m)<£>/V— M~HS/— F<DM.XF/\"- h- 

rtPath(p, m) 

[0238] rtPathD(p, m)J3. rtPath(p, m)^^^/— K^9*>"em# g <D]}— 7<DpmW&fe 

[0239] rtPath(p, m) = [(0, i(0)), — , (k, i(k))] 

£Uc<k#, 0 ^ kl ^ kftSfcSkl^fcoT, 

rtPathD(p, m) = [(0, i(0)), (kl, i(kl))] 
ttt^btffrfr&o 

[0240] rtPathDV(p, m)te, rtPathD(p, m)<D&y— KKfiJ ^{it£#J9 ^ TfctwefoS. 
[0241] rtPathD(p, m) = [(0, i(0)), (kl, i(kl))] 
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(Dk%. rtPathDV(p, mMlk<D£of£Mkt£?> 0 
[0242] rtPathDV(p, m) = [( (0, i(0)) ( v(0) ),•••,( (kl, i(kl)), v(kl) )] Q 
[0243] curSBT(m)^*5tt5, /— K P = 0. i)^bcurSBT(m)tf)/l'— bU&UW~f'Z><£>lZ ! & 

W£S~ Kp' = (j ,i)<DM&&MS— F<DMffi.'<XkWTfauthPa.tWT<s>, m)i^i" 0 iB. 

[0244] k (m) = kt?, 

rtPath(p, m) = [0, Kj)), — , (k, r(k))] 
<Dk$, authPathT(p, m){4rtPath(p, m) V ^^(DXoi^-t^k^^^ 
[0245] authPathT(p, m) = 

[ (G. a(j)), LR(p), — , (Ck-1, a(k-l)), LR(k-l)) ] 

r(?Wmm<DW&, a(f) = Ki')+K Ki')dS^f»ro«^, a(j') = 

, KnaHWR©*^ lrO ) = R, Kj')a*ftiR0>#£-. lr(j") = L-efc3«&u j 

' e [j..k-l])o 

[0246] -tUT, authPathT(p, m)<D3?3fc(G, a(j)), LR(j))(^OV vT> LRG)<Z>£&#£ (LR) ffk 
V^ 0 rtPath(p, m)0>3S3K (j, rG))i£OV^T, iWM^CO^ (j,r(j)+ 1) £G,Kj 

))^ffl^tv^\ KO^s^aHRoi*, G. Ki)-l)SrO, Kj))©£M5^£v 

[0247] authPathT(p, irOte, rtPath(p, m)<£>/l — HsWt-O^tfXfrli^&fcSV 

[0248] *fcauthPathT(p, m^bLR^^If #£|&V ^cttf>£authPath(p, m) £#< G IP*? 

authPathT(p, m) = 

[ (G, a(j)), LR(j)) ( ((k-1, a(k-l)), LR(k-l)) ] 
authPath(p, m) = [ (J, aG)), — . (k-1, a(k- l)) ] 

k-fZoMK 

authPath(p, m) = [0, aG)), (k-1, a(k-l)) ] 
/^4-£b;h4xk?authPathT(p, m)&UT<D£oiZ$YMX*%Z> 0 jl e [j..k)fc:*j-UT, rtP 
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ath(p, m)<DV"<jV>il(Dy— Ktt 
01. floor(i/2 0,_i) )) 

bKZ><DX\ floor(i/2 0l ~^{8!&^feS^LR0l) = R, *H(refcSfc# LR(jl) = Lt 
authPathT(p, m) = 

[ (0, a(D), LR(D), ((k-1, a(k-D), LR(k-l)) ] 
t*3ttii«fcV\ ) ftoT, authPathT(p, m)tauthPath(p, m)©— ^^^^Srtf^i"* 

[0249] authPath(p, m),R.tf authPathT(p, m)©^^ m# @ <£>!)— 7(D#|^'fB^^*ofc^ 

authPathD(p, m) authPathTD(p, m) 

5o authPath(p, nO&T/authPathlXp, m)^^^^^^^^^^^^^, 
kl ^ k-j&Ski, 
j^j(O) < j(l) < < j(kl-l) 

tt&&mmo), Kki - Das*>«j, 

authPathD(p, m) = [ 0(0), a0(0))), — , 

O(kl-l), aO(kl-l)))], 
authPathTD(p, m) = [ ( 0(0), a0(0))), LRO(O)) ), — , 

( Q(kl - 1), aO(kl - 1))), LROXkl - D) ) ], 

[0250] Zh\^ authPathD(p, m)^.tPauthPathTD(t, m)K, ^tlKMir^/— KOf'JMI'filSr 
Mx.tch<n&, ^§->!rauthPathDV(p, m)S.t^authPathTDV(p, m)tWi<o McfctfyiCti* a 
uthPathD(p, m) / R.tf ; authPathTD(p, m)^_h|BCD«J:5^^^^tv^>t#. 
authPathDV(p, m) = 
[ (0(0), aO(O))), v0(0)), 

(0(kl - 1), aO(kl - 1))), vO(kl - 1))) ], 
authPathTDV(p, m) = 
[ (0(0), a0(0))), LR0(O)), v(K0)), ■ •• , 
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((j(kl - 1), aOCkl - 1))), LR0(kl - D), v(j(kl - 1))) ] 
t*5<„ ---e, e 0(0), Kkl-l)}^*fbT, vO') = V(j\ a(j'» "Cfc*. 

[0251] Ji^<^iii^^]7fco^?sfe(ofpi^^^&^«to, y— 7#fmOy- ^vM#C#J 

^ffi$rS"J«5^TfcS|5g-e^^Ojli^jKj7KOfl|^S^TL, ;6>OauthPathTDV(p, 
mW±m<0£5lzm&tlZ>kZ, Kp = 0, 0<^#J^iiMp)i:authPathTDV(p, m)*» 

'Ol)SrWT(l), (2) \z.£\)ftMmz.fem~fZ> 0 ^(Dbt, v'(kWM$rtz<D/v— hmt 

[0252] (l)v'(j) = V(j, i) 

(2)jl e [j..k](^U-C, v'OD^JfelSSttfcW** LRO'l) = L<Db£s 

v'Ql+D = MvOD II v'OD) 

LRGD = R 

v'Ol+D = h(v'(jl) II vOD) 

[0253] ml, m2^)li^^y— 7##tU ml ^ m2ii-5 0 £0>fc# N 

curSBT(m 1) Q C urSBT(m2)-efc<5 0 
[0254] p = (j. 0 ecurSBT(ml)t-r5o -©it, ^T(0(1), (2), (3)^SCO 0 
[0255] (l)rtPath(p, ml) £ rtPath(p, m2) 

(2) authPath(p, ml) £ authPath(p, m2) 

(3) authPathD(p, ml) £ authPathD(p, m2) 

o^^cffi^rmib, 

rtPath((0, i), m), rtPathD((0, i), m), rtPathDV((0, i), m) 

rtPath(i, m), rtPathDO, m), rtPathDV(i, m) 

authPath((0, i), m), authPathT((0, i), m), authPathD((0, i), m), 
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authPathTD((0, i), m), authPathDV((0, i), m), authPathTDV((0, i), m) 

authPathG, m), authPathTG, m), authPathDQ, m), 
authPathTD(i, m), authPathDVO, m), authPathTDVG, m) 

Bafo&0>»»l#-&*ilfcU iO < ilb-tZo — m#M$}*<ns—V(0, i 

){C*J"LTrtPath((0, i), m)fc&>T<D£5\Z$Y&X%Z>o 
[0257] rtPath((0, i), m) = [(0, r(0)), —, (k, r(k)) ] 

{I.U k = K (m), j e [0..k](CMb-C r(j) = floor(i/2 j )tm< 0 
[0258] wO^HH^ioT, 7— K(0, i0)O/V— h-/^rtPath((0, iO), m)£/— K(0, il)OA- 

— W^rtPath((0, il), m)£rff^i-5 0 -t"3£» rtPath((0, iO), m)£rtPath((0, il), m) 

ifi:i-So ft#Jf£— ifcUi^P{f£r, 7— K(0, iO)k/— 

K(0, iO) (D-a-SE^t (confluent point) b^S a ^L-X, &ffi&<DU7h'^'(^h* : k, 7 
— K(0, iO) (a— If ,&)<£>/— K(0, il) (^^,&) {Cj^fBtiE^ (authentication point) 

b£&o 

.[0259] JW-htt. (D|li^^7tc(cM^^{-^tt5MIE^ 

%£&mz£z>mu&bfem~rz>o 
[0260]. omikM^<D^.mi) 

B&&&MlkMB*<VWAM&.M%0*X\ fcSBt^lCfeV^T, last(leafs(B))K*j-/& 

h*<Dmmimznw£tim^xt>nx\,^ 0 

[0261] -l4Kicora 
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[0262] last(leafs(B))^^i-^7^^KcD^ad5||-Tbfei#{C{i.leafs(B){C«i-§#y— 

&mx, B<D&;-v*<Dnmm.nVr%zn* &y-wz.%mxbtix\^z> 0 
[0263] QmikM%o*<Dmm2) 

$r^bU round(i0)(^*5V^T, Cf4g:glfiEW#£r^ff U ^f4round(il)^*3V>-C^ 

[0264] (Dmm&vm^mx, gp*>/-K(o, \\)<D^mummftffi5ef-z\z- 

[0265] (2) ±.mMm&%(S, i')b&<b, authPath((0, iO), iDizM^y— KT\ 

j;«?/h$v^{^i-sfij^#:^, k(o, n) \z.nfoir%7Vi>Yx%mmnm$: 
&mut% mm-fr, j—y (o, ii) izMJt^y^h^m^^ ^x&mxtzii 

[0266] SPip, il ^ i2ii-S^, authPath((0, iO), \\)\^mttJ—YX ^^)\>1i^ &0'h^ 

■b<D\Ztt~tZm^i&t% EOC(i0)fc3V^CToken(i0, i2)l^**v5 0 
[0267] (3) ±mmm^<DpmURXfrtPatH(.0, iO), i2)(CjR-r-57— K-C^-</V^^^|[E 

^ow^/i^/J^vv— K<£>#J^iIf^ /— K(0, i0)T-^SfiE9?*£g£&UtfiJffl 
K(0, il){c^i-*9^^KWI*tcS3V^XS^t-5ill6*&^x— ^*5±t^ 

[0268] •ffiJteOSEBU 
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[0269] (1) *-f % 3RB (DtcoV^03lS:fflv^oo8tt^i-* o ir?, ^$fL££(j, 0, 

<DU7h'^ J c<;l'h*-e&Z>MU&&(j, i')t*3<„ y— K(0, il) <DcurSBT(i 1)^*3 ft 5 
fw^nPatMO, il), il)^*3V>T, (0, iDfrbttiftVX. &ffi&iZ.m.Z>UM<DS 
— FSr(T, i')^<. fiBSE/fttt, 0*. t^oT, SSiiE^ 

^authPathTOl, il)0£|ftd>e>« ((f, O, Ufct/— K(0, il)CDcurSBT(il)f£:i3tt5S&tiE 

*fc, /—KG", i')— <Dflg<^)#J^T{*, roundGl)<fc»>llltte**TL'tV 

§o xox, id', o, l, vo\ i*))»(o, ii)»c^ss£«SEW*rt«^— 

•So 

[0270] (2)JfclC3Sl (2)lCOV>-C032*3«tt5ia33S:fflV>OOiftW-t-5 o . 
[0271] k = k (il) t33<o 

[0272] ^SE^t (j', i') K (0, iO) <£>/V— |w^rtPath((0, i0), il) d^nSo --"C\ 

rtPath((0, i0), il) = 

[(0,r(0)), (f-KT)), O' + LrO' + D), -, (k.Kk))] 
[0273] £fc, authPath((0, iO), il)<©g?*-C % V^/Vj6Sj'J:9/Jv*V V— Ktf>3fetf*r 

[(o, s(o)), -,0'-i,sO'-D)] 

[0274] £-jl e [0..j'-l] \Ztt\^X, VO'l, rGl))d s EOC(i0)fc5VM2CToken(i0, i2)tc-^*tv 

[0275] authPath((0, iO), il)0^^tdJ:»9. 

authPath((0, iO), il)cDl/-</Vjl^>^^p2 = (Jl, s(jl)M, rtPath((0, iO), il)<DL"</H 

i. 

l + lco^^p3 = Oi+l, r0l + l))^7^h•^^/^-K-Cfe^^v^^4v^^•^-•Y'fy^K 

-cfcSo if^bT-fo^^^^io-c^^it-rso 

[0276] (#-a-l)p2d5 p 3<D9-rh-^^/VK-efe5<t#, El32tC^-rj;5f-. p2<D#J itfilV(p 
2)f*. il ^ i2^i2fC*3V^-C, Ctf^f "C^SjIMM^^— ^ CTokenGO, i2)K^ti 

So ***6>wr, *ft^*j*a>ttfrite.w, y-^(o, iD^^-rs^^^K^^ 

W^|iEWftHffi^i|**?ofcl^^-Cx El30COB-e^$nfccurSBT(il)(Og)S^7h:(DfiJ Mi 
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[0277] m^2)p2^p3(DU-7b'^^^X^t^. m33i£7jk-t£?^ /— Kp2C0#J^ 
fiV(p2)f4,round(i0)(^^^HlI^M^^#fC^ahSS|EPJ#^«^— # 
^m<5o |lI33<Dp2^— h£1-£gl5#*B MoV^C, 

Vi e leafs(B)[ i < iO ] 
X&V, ^oTB Q curSBT(i0)^^oi0^ISSlJ$^9^VK<D^^I^^, leafs(B)0 
fiJ^^M^LTV^o iot M^C^^^ttff U£<£«9, p2 = root(B)Of"J ^Hit 
iO-Cf^g'i$tb^9!>^K(-*5V>-C?ft^UTV^o t^oT, P 2fiauthPathD((0, i0), iO 

[0278] o) ' mm^<D^mRx^^u (2)^, &n e io..n\zMi>x. voi, rQimzir 

[0279] *-f „ V(0, K0))«^Vh^:aiiEP^#^*tt-CV>6y— K(0, i0)<D&mi&t1rZ> o 
[0280] jl G [0..j'-l)t£*fLT, V(jl, Kfl))#tW&ha:HKJfeU V01+1, Kll+D) 

&SXT<D£5\z$)rW-$-Z>o KjD < sOD 

VOl+l. rO'l+D) = h(V0l, KjD) II VQl, sOD)) 
s(jl) < rGl)0>if?ra\ 

VOl+l, Kji+D) = h(v(jl, sOD) II vOi; KjD)) 
[0281] ^T-e«> N?*l©0^^LX, ^^HiH^IE^^^aoi^— \?*mi&ti}&*b 1 0 

[0282] ^fti^^^^^UT^^^^y^^/Vf-ft^^nSi^^JllM^^^^U-C 

#;o£feW3/^<9fco 0 

[0283] (M^^T^Ot4^3) 
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[0284] (*1) time(aO) e [0..T) 
[0285] (*2) time( a ') -time( a ) ^ T 

[0286] (*3) time( t ')-time( t ) ^ T 

[0287] ^lCOi!#, WTC0(1)~(4) # 3£0 0 

[0288] CD a G [ z .. x '] fc*5&|Cj:5aE>*KaE^ a 

(2) a e [ T .. t '] £fc3Z.{cJ:5£3tEj&a moivr, t a lcJ:5iraE/SC0>SRI ^ 

[0290] (*4) time( z ) ^ time( a ') < time( x )+T 

(4)T ^ time( r te&SffiS©:*— if,£ r t£OV^T, a < t £ft£Zl<D^S,& a 

[0291] ^^©SEW 

[0292] -(tfr&D t J;9fclc(fcfit-5Z.JcJ;5Ka^*s#«E-r*»#«^t*.S. t MtC 
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time( a 1) < time( x ) .Rtf time( x ') < time( a 2) 
^^3io 0 time(al) < time( t ) XV, -time(al) > -time(x) tt£Z> 0 
[0293] t£oT, 

time(a2)— time(a 1) > time( x ')— time( t ) ^ T. 
— time(a) e [time( r )..time( t )] £#5J;5#Z.K«J;5fc5gS3L6 a ^#*EL* 
VMD-CS>5/^> a2«alO^C7)^^^-C*)So t*£oT_hfe^#(*2)J:^ 
time(a2)-time(a 1) ^ T fcjfc6>fctf*LH&fefefcV\, W±2»^ 

time(a2)-time(a l) > T time( a 2)-time( a 1) ^ T 
tfcU^J&jWj&tfuSo flfot, time(a) e [time( t )..time( t ')] kt£Z>£?t£Z J lZ£.Z> 
feS^jlt^ a ;$S#£LftV ^UfeiZMyX-frQ, time( a ) e [time( t )..time( r ')] 

[0294] m&2) x «fcl9fe(^g-r2>2i^J:5^^^^L^V^-a-^X.5 0 r<Dt#, 
time(aO) <= [0..T]^^S^ aOCoV^, 
a 0 s [ x .. t '] 

[0295] (2) ±3£<Z>Mg&&#*0'|!£Sr2 g (l)*»feEt»lti»36**L«. 

[0296] o) t &)mz.Zj<D&&fotim&ir%ti^i)Az.&)m&ftrt-irz>o 

[0297] (*§1^l) t i«9Hfli-2i<^^^W?5Ei-am^#X.'5o x fcfcHKHfc 

time( a ) < time( x ) ^ time( a ') 
time( a ') — time( x ) < time(a') - time(a) ^ T 

time( a ') < time( x )+T 

£A_hJ;«9,(*4)^#e>tbSo 
[0298] (^2) r «Wffite&©££^3&S#&LifcV>t&£*#;t5. t£fC3<Dltfltif£<fc^ Z, 
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<D%£&& a 0-etime( a 0) < TbftZ>h<D&&Z>o 
[0299] time( z ) ^ time( a 0) < T 

time( a 0) — time( x ) < T— time( z ) ^ T 
«toT, time(aO) < time(r)+T 
£JLhlC£!!>, a' = a 0 (*4)tfS#t>n5o 
[0300] (4) Z.©g£^E^L aOT\ time(aO) S [O.-^t^StO^^i-^^VN^ifH^^*!) 

[0301] 0WWfc*Sl*©ttflt4) 

SBT£ffi£k<£>]i|g#cA#>)7tciU i&SBT©Mg&&*fc+:y— 7##£U kl ^ kfcU a 

uthPathTkl(i)£\ authPathT(i)OftU]Okl^O^^<D^IJi:i-^) 0 
[0302] authPathTkl(i) = [((0, i(0)), LR(0)), ((kl — 1, i(kl-l)), LR(kl-l))] 

ti<„ §blC^-C % vl, v2£M^52oO^-iy^iI£U API, AP2&i[k<D£ 1 ?\Z-$-x_ 

[0303] API = 

[(LR(0), vl'(0)), (LR(1), vl'(D), (LR(kl-l), vl'(kl-l))], 
AP2 = 

[(LR(0), v2'(0)), (LR(1), v2'(D), (LR(kl-l), v2'(kl-l))]. 

[0304] (*1) #f e [0..kl] vl"(j')^TO«fc9{'Sil* Wi-3£*«o 

[0305] vl"(0) = vl 0 

[0306] j* > 0 T? LR(j"-D = L <£><h# % 

vl"0') = h(vl'O'-l) II vl"0'-l)) 
f > 0 -C LR0"-D = R <^tf\ 

vl"a') = h(yl"0'-D II vl'0"-D) 

(*2)#j* e [0..k](^^L.-C,v2"(j')^WT<^J:5^Bf!lfKJt-^fe ; 5o 

[0307] v2"(0) = v2 • 



WO 2006/019143 



PCT/JP2005/015085 



72 

j' > 0 -C LR0"-D = L <Dt%, 

v2"0') = h(v2'(j'-l) || v2"0'-D) 

j' > o -e lro'-i) = R <Dt%. 

v2"(j') = h(v2"(j'-D II v2 , (T-l)) 

vl"(kl) = v2"(kl)iHK5£i-5 0 j' e [o..kl] t? vl"0") = v2"(j') i&Sft/J^j'Srj 

ltM<o vl # v2, SP*> vl"(0) * v2"(0) -efe^b, jl > 0 T'fc^o J'O = jl-l^B 

< c LR(jO)d s L"CfcSd» R -e*>5d»uij;«9»^tl-i-5„ 

[0308] (^-a-DLRQO) = L©t# 0 jl. jOtf)^^^ 

vl"ao) v2"(j0)o 
[0309] fct, 

vl'OO) || vl"00) * v2'(j0) II v2"00) 

-2f, _kx&tf>(*l), (*2) ^<b, 

vl"0D = Kvl'O'O) || vl"(jO)) 
v2"0D = h(v2'(j0) II v2"00)) 
tot, 

h(vl*(jO) II vl"(jO)) = h(v2'(j0) || v2"(j0)) 
tfcoT, vl'QO) II vl"(j0)tv2'0'0) II v2"(j0)^ > «r£HJB/v?i':xHft h^W^i^S 

o 

[0310] m&2) LRO'0) = R ©it, ^l^ttSi^^LT, 

vl"(j0) || vl'(j0)£v2"(j0) || v2'(jO)flS, fff^SHP^^Hft h0>«^£fcS^as 

[0311] £l_b&»£>, t'^b^-a-Ct, »^Bi/^r^Ht h<Dm$Z&&ti£Zk\z.t!:Z>o 

' 'Qotftzzbh, (mm ±mmx^m^m ^x) &o%*£\ \ 
[0312] m^. ±m^tcmiR^3<DmM<DmmKm^^hm^mm^y L ^Rxf4 
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[0313] <m4(omM<7)^m> 

(4 - 1 . v-^-Mff /&) 
121 34 ft „ ^ 0>&40>mfctf> JgtR iCfiiS^'O WB^IEM '^rA 1 OOaO 

2I(I=A,B. -,N),&^ £Jt±0«-S6'gSr*B2^g§iH5-r5, fclfctf, ><V*— *s>HWI 
fllladS3FiJffl#|g«2I*»b«H''<^MR^!iEWll*(£ATx REWg#^5) i-J&XLT, 
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[0315] _k5£UU;5^ >f ^^WH#iiEW®#&Jft«IJi2attu Hg^*&*«:ffl v ^X4^h 
Mf¥m.W&J&*&k#>Z>75K roj«?fe^7|clcov^035*fflv^-CiJiM"f"5. 12135 

[03i6] m&.Mifo*<D&y~-F0J--7&m<) tem%xbinz>m<DWr&ft&t£. stf(dm 

") b^-To ^<D^iCVXT^<DU^V(Dm^U^h±i^<DU^/V(Dm^iU^fYW^ 

[0317] filTfc&i^TWu H35K^i-«J:5 fc, l6^coy— 7^-r5Hi^^7fc<^^{c 
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[0318] 4\ JiH^^J*y— 7fc:tl»J13T^^>»fc#v(o,5)^^^ (S»^*s(o,5)-C 

£.©'^^~fiM0,5)a»M;— hteH (=v(4,0))Sr^:*Stc}i x v(0,5){cv(0 

^WSrff-^U £b^^s/^{ii:h3' ^v(3J)£;&M;6^jiSLT^^'fii:H 

(=v(4, o)) £ff-|fL-mkf ±v \ roi^^^Jiiict^vco.s)^^^^?)^— ^( 

-rt1JV(0, 4), V(l,3), V(2,0), V(3J))^b/V— MeH/&St^-e#5££\ V(0,5){i^ 
[(V(0,4) , L), (V(l,3) , R) , (V(2,0) , L), (V(3,l) , R)] 
[0319] ^^Hli^liEBJJ^#^Jc§P13a{i, 111365;:^- £5ftS3tiE^# EOC(y)^t? 

ra^srffr&u mmmmmzwz.mm'r^^^ox^o gmmmw Eoc(y) 

[0320] SEKJS^t-ttx f IJffl#^E2IOi®*^^-S^t^OiiMM^y ? -^TK^]L 

TW\ V(0,5){Cto-C, V(2,0), V(0,4)WJP«Mi^9*— ^"e**^. V(l,3), V(3,1)J2V( 

o, i5)*mmbntcm&Mmzm^mtemmffi^-*x&% 0 — jrk:, *> 
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—Pt^Oo Hl35^33Vv-a2, K(0,5)O7— K(0,10)('*3tt2>jlMffi^— ^(i^ 
y— K(l,3)-Cfc5 0 

[0321] rrT^^^fe^D^(CfcntSM^#^J ^ WJ*la37^V^XtftK-r5o ft. 

ti¥^o 4\ fc5fiJffl^g2i^^<^^^^xi(y-K(o, 2)), X2(y— K(o, ID), 

X3(y~K (0, 18)), X4(y— K(0, 2D), X5(y— K(0, 29)), X6(y— K (0, 3i))-efc5 

[0322] is— ^xffi^<D^^{z&\,^xn&&m&K&\,^xuT(D£?te<r~- ztmm^ 
[0323] (i)xi&\zL&rtz>m.wfc&izte, xi&<Dwmi& T&f— zim&n&<,&w-mz.\% 

, y— H(1,0)<Z>«15«). 

[0324] (2)X2^ClC*3tt5liE|l3^^ri, X2^©fiP^*t^— &tfXl^©X2^JC*5 

3,o), y— RU.4), y—hXo,io)<D&mi$., xi&<DX2&\z.35ii-fz>mmWT&*—*tL,x 

>/-K(o,3), y—\*X2 t i)) <Dpmm* 

[0325] (3)X3^[;i:fctt3MJ&^-J3\ X3,&<7)BPBtffi^— K:Xlj&RtfX2/k 
lt, y— K(4,0), y— KC1.8) online, Xl^OXS^^^^il^M^— *£L"C 

, y— K(0,3), y— K(2,l), y— K(3,l)<D|PJMHItU X2^(DX3^^*3tt5iiM«^— 
^tbT, y— K(2,3)^J^^tt) 0 • ' 

[0326] wximzidtf&mmfc&izi^ xA^mmw^f— &mzxi&, x2&r 

y*—?bL.X. y— K(4,0), y— K(2,4), y— K(0,20) <D^mm. Xl&<DX4&K&tfZ> 

mmW^—^tvx^ y-K(o,3), y-R(2,i), y—m,D<Dm^m, x2,£cdx4,£ 

K$>ttZ>mmffi$Ey*— PkVX^ y— K(2,3)Of"J^fit, X3&<DX4&KiotfZ>mMffi 
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[0328] mm%mm2\n. a^a— z^yw— Wf&ft\^xwftmm.\*h : f~- 

-5-r^^hjin^tiEP^^iiEgi523a N ^mmmm^^mmm^n^bvx^^b 
[0329] rr-e. -r-<^h)ii^EEPj^tiEifi523a«, %mmww\z.ttvxsiT<Dfeffl&tfe*i% 

^(D/v—hmtvx^m^tz.mtmm^m2\xnw^ntz^—hm^—mir^ 
[0331] m2<D$ifflmmbLxte. ^mmm^m^ti^mxh-oxh, mm&mmio& 
■*-5t>a>-e*>5o 

[0333] feSMI^^J^oy— ^a^MbT, ^^/v-M:S5/^$:a©;v-h-/^iW 

, rtPath(a)t#< c rtPath(a){cM-r^7— Y<D/V— h^^^OOJL^/— Kfeibl 
ing node)75^^5y— K^>Mt/?r^|E^^ 0 ^tl¥U ; ^ authPath(a)t#< 0 
[0334] fe2)|llI^:^^7tC(D2o<Dy— ^alta2{Z10V^, alctt)^f-a2^^i-5 
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[0335] 4\ 20©*IJJB#3S1tt2AXU*2Bj&S x ^j^fi. ^^M^^f-iO. 

^(DEWJj?t§r®#m©tL, al, a2, afiSr^#$l»2A^>a« 

[0336] r^T% i/—^?M3&o&Xcm vCii, S»^iai&sa*^b±»)fe fCfitlt 

[0337] ^ot, EI38©t&£\ M^al^^R#^i:U/ci:^O^^JIlM^^7tc}C*5(1-S, 
K^aEla523afi, r©ZLfc*#3*-fSi!if^lcJ:t)tftffiE-t-5t>0-C*>5o 

[0338] ^±o#^g(*. vmwmm&ffix.tc'p&timmm (c 

PU: Central Processing Unit) , zfn-^y^f— ^£l|R#fi-t-£#£E3r;fr-f-5RAM(Ra 
ndom Access Memory)^fe&5£ieti^© (^U) . /n— K?*-W (HD) ^(D^M 

m^tlX\ ^ 0 £©5*>* |iE^ilgla<D-r^<>'HWra^*ArjgP12a, -f^Vh 

T^tC^Jffl#^fi2IO^^M|gj^|E^^*^22a^W^Vh|lR^|iE^^|iEl3J23a 
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[0339] (4-2. i/Xr&Wilfe) 

[0340] tt, mzv*^m\^x^^vMPfmttm^<>^xwLW-rz>o 

[0341] nm%mw2\jfimx^mzK7 £ v?^-y i ~ ^y^t^mmm^^ir^t. m 

^T-y^SlOa, S20a) o 
^^^°S30a, S40a, S50a) o 

[0342] rtucj;^ * wm^mmw^ ^mmmm^t^mm^^n-t^t^x^^ ( 
^x^s60a) o ^rb-c. mm^mmu^ ^.(D^y^sioaRrfseoa^mm^^^ 

' [0343] rasigia-ete, JlH^^JOfcfecD-^^ (JlI#Cil#W^) ftt-fcv 

fit, ±il!Ufcrasmia^i!3^^«9ig$n, HlH^^)^^^^Ti-^t, 'S^ltt 

i~<5 {TsryZfSlOa, S80a, S90a) o 

c [0344] m^m4o^0m\^^h^^hm^mmmm^m^^^xmmir^ o ^tin 
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[0345] *-*\ mm&mu2At£ % &mut\ ^sjaEW*Eoc(a) i&&&*\z:*svz>g:mm 

+*»Mft5lM-* C^^y^si20a, si30a) o y— 7#^-n(a)J;?)*:#&y— :7#-^flWB 
#^»2B0>g»j£U;:*><54fra-fcH:, KSft^O- ob£igU\ -?:<Dy— :7#-?§-n(b) 
. S:fiJ^#i6fi2Am2H&-f5(^y^S140a, S150a)„ aiK^Lt, y~7##n(a) 

L<£> ^£rfUJB#^«2A{£j£{f -TS (^y^S142a) . 

[0346] y— 7#-^n(b)^Jffl#^g2Bd^Sfab^f1J^#^g2A{4 v y— 7#-^n(b)«t«3 

^aft^ftSjlM^^r — ^lateData (a,af) «r##U f Uffl#^iS2BtC C* 
^^S160a, S170a, S180a, S190a) o ffi, VcMLvStig?— fttUD'gO*^— 5*6#U 

m#mm2Bfrb%:mi,fck%n, ms&t^r-r^ c*^s^si44a). 

[0347] f IJffi#3gg2A^£>i§M5nX — ^lateData (a.af) Sr^Ufc^Jffi#*»2Btt. y 

fc^JffifiEK #EOC(a) 1 31 JMtgX— ^lateData (a,af) ^)^MIiE^O#| ^ ^th^l" 
-5(^s/^S210a) o #Ct~, Sft^bWSatiEWflfEOCCWlJl^^nSfiPI^M^^*— 9 

^ ffi35-£**LTl ^ t # 1* > Sfi^a*SS»^bi 9 B# ffl tfj IC *5 { ' &f&£tltc t V 
Jtife**3pJffl#^e2Alc:3Hi-t-5(^7 l y^S220a, S230a) o — f&tiL&<D#J^ 

S220a, S240a) o 

[0348] CO^m> flJ^#^g2A«, ^J^^^Sff U J&#i-50-C\ 2flJffl#W{-*5 
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v ^x^mmmm^n^m watras^SE^s-fc* 5 ^* c*7v:/s250a, S260a) 

o 

[0349] ±mut^^hm^mmmm^mts mm%-mm2Afimm%mw2Biz.'& 
mum m<D&®t& mm &o \z.m<o^Mum » Kn-r^mw^m^m ^mm.2 

[0350] *1\ fUffl#^M2A«, ^IEUfcV^S3el^E0^#EOC(a)(^^a{^(t6^:al^E 

mm) &ttrtxmm&mfe^?k%mm#mn2BKmit -tz (^^ssioa) 0 tfj@ 

#-5§-n(a)£fl&ffiU y-^#-^-n(a)ct«?/J^$V^-7^-^. ,&{/y-^g^-n(a)J:*)*# 
V ^7^&mFa#BM2B<Dmm&<D^falbtfi%$-1rZ ) (X^y?*S320a, S330a) o 
y — 7#^- n (a) J;9/h$V Ny— 7#^&U*y — :7##n(a)£<9*:#V ^y — :7#-^*lJffl 
^^^BOM^^fe^m-a-t-li, y— ^# -5§-n(a)£9/h£V ^y— :7#-5§-(D3£^&b 

-Sril-S^ttS^ y— :7#-S|-n(a)J:«9;fc;^y— 7&^-<Dm7£&m&bf%m&&y-y° 

S340a, S350a) o ffi, ^T33£ii^ s frV^'8-{a:S:, ittfe "Sffiy*— ^ftLO ^ (D^ 
yir— v 5 $rf)Jffi#^m2A{C^ffi--5(^5/^S342a) 0 -eUT^Jffi^©2A«, It 

(^y7°S344a) 0 

[0351] &l flJffl#^2B{4, ^^b^W^^bflCfcttSjiM^— ^lateD 
ata(b.bf) £&#U y— 7^giJ#-^n(a)in(b)^^^^!:^;a(Dg^^;bfcMi--5^liE^ 

ffi^ff-^TS (*X5/^S360a, S370a) o ^,&a<D^:SfiEI£)*EOC(a){C-^ 

tc^^^xfctv ^mfem%:%:mm&mm2A^mm -tz> {^yzfsz^oa, s390a) o 
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fC^ff i~-5 (X^s/^°S380a, S400a) 0 

[0352] ^<D^m, mm^mm2A\^ ^m^^imu &#i-5tf>-c% 2mm#miz& 
^^x^mmmmmn^mmmwi^^m'f-^t^'c^^^yysuoa, s42o a ) 



[0353] ft, ±&vtc^^bMf¥mw%imj}mn. mm#mm2ARmm%-mmB& 



[0354] ^ot, m4<DmM<DMM<O^l/hmftU^>*^^100a\Z£fLl-£ y *#lii£r/B 

[0355] <^5<DmM(omm> 

(5-1. v^^AUt^) 
Hl42fi, ^^O^SO^SfecD^S^^S^^^HWI^^^^^OOa^^ 

^ivfJIfifcia-efcSo ^^Mi^^^xi^OOate, |E^^«4a, **OflJffl#K 

«5I(I=A,B, '-.NK&t*, W±©#$IB**BStC^itt-t-«, fll&tf, -f^— 

m. nummm^\z.^m^ti^^^—^^yv^—^^m^x^, mm 
mm^mm^mm:5m^<Dmmmm^^x^mmmm^t^mmit^^m 
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[0356] r^-e, &Mte<DMmttts4<Dmi&<Dtei&kt£* mm^^m^^^wx^ 
*ttvxmm*mmirz>o 

[0357] mmmW.±afe. a^bTa— ^yh!7— ^3aS^UT^Jffl#S6«5Ifc7*— 

^^^ftlHSlla,flJffl#^g5I*^©fiE^M*tbrSim$ttfc^^/V-^~ 

[0358] ^>-Hl|l^|iEP^^^^41ai*, @43^i-.£5&S3t[Ei!# EOC(y)2r^tf 
fiE^/&^%m&U 5f-IJffi^g5n^{a-r^i5i^o-CV>^ 0 ^3ffiSEPJ# EOC(y) 
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[0359] tfts mmftma-i, mm#mm5i<Dmm<D&m&<Dmmnm7 t ~-?TK2<DttLW 
[0360] ^^^mM(Dmm^^^mm}Z^<DMc^m^m37^m\^xm.m't^ 0 ft, 

4 

51fab<D&M&frXl U— K(0, 2)), X2(/— K(0, 11)), X3(7— K (0, 18)), X4(7 
— K(0, 21)), X5(/— K(0, 29)), X6(7— K (0, 31))-Cfc5£i-5o 

[0361] mmm^^^^xn^mm^^^x^r(D^fj:^-^mm^mm5i 
[0362] (i) xi^icfcttsaEM^icw:, xi&<Dnpmffi$E7 t —?i!>m£tiz> (Mc&ma-x 

, y-K(i,o)cofij^M)o 

[0363] (2)X2^^*3Ct5SE^^{C« x X2/&tf>gPB#M^7 f — ^.t5Xl^COX2^^*3 

3,0) K(l,4), y-K(o,io)<D#j^fit % xi&<DX2&\z&i-fz>mmffi^'r-?bls 

r,y-K(o,3), y-b\2,i)(Dmmim o 

[0364] (3) XZ&iZ&tfZmWm&ltt. X3&<DWmW7Gy*— %.XM2&<DX3mc$> 

4,0), ;-m,8)(Dpmm., x2&(Dxmiz%>ftz>m3&ffi^7*-?k^x^ /-k(2,3) 
<Dpmm 0 

[0365] WXl&iZiott&mmjfctgKte, X4,&<DgPB#*f&5&r— S.tPX3^<DX4^.(C*5 

^ilMW^-^^^n^C^^t-f*, x4^oip^M^-^^bT, y-K( 

4,0), /— K(2,4), 7"K(0,20)<D#J^{it, X3^<DX4^tJl*5it5jiM ; fi^— ?b\-,X 

, y-K(0,i.9)o*ij^{t) o 

[0366] Elf, X5^X6SC*3V H3#T*&5 0 r^i^JC, ^M^^^^V>T^, IE 

k>. mmffi'^^&^^xte. m^<D&m&&mzxhmji^fcMir%mwj&& 
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[0367] mmm$Ett<7>mmfo®~ehoxh, mm&mmsm. mmmaz, 

[0368] Hl44(^1-£5^ Jli^^^7fcST2(D30(Dy— ^al, a2, &3&&frbZ.(Dm$rX*&> 

[0369] *i\ a2^(Da3^(C^{t^@M^'r— ^^^"C^^/^^v^y— KCDW^ 
/V£rj2<tg< 0 *fc, alWa2{£j;5i&fiD&£AP(al ( a2), ^rOil^y— K^:AP'(al, a2)<h 
AP(al, a2)(D1^7V£rjl£©< 0 

[0370] ^<D£#, glli^ al^OaS^^^tt^iiMM^^— *{£"^*Jx3fgfiE/^/— KCO 
9^W^/^jiil9^/jN$v^^O#]^fit«, al^(Da2^^^{t5jiMffi^X— 

[0371] ^2{C N al^<Da3^^*5it^31M^— *^*ft5IBIiE^ W-Rtf>9*> 

[0372] ^3^ x al^<Da3^^{t§ilMW^^— ^{-^^^^liE^W— K<^5 

■^^/V^jK-i^^^v^OCO^-^tt, a2^0a3^(C*5}t5ii®M^7 ;f -^^* 

3^lc^tt§31MM^x— ^t^m^^SE^^/— Ko5^^^/^^jli«3^:#v^ 

<7)CO#J^fttt, a2^<^a3^(C*3it^jiMM^-X"^*^tf'^'C^-So 
[0373] £Jt_h;S^ al^a3,£{C:fctt5Mffi^--^fc£, KT©3o©f- ffrbtYW 

[0374] (l)a2^(Da3^^*5^'5jiMffi^7 ? ^-^ 

(2) ^(DUmW^y*— ? 

(3) al^(Da2^^*3(tSigMW^^— ^ 

ft, ±SB<D(l)~(3)^al^(^a3^^^jlM«^— ^fhML-rSM^ 
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[0375] Z(D$B&k$iRMm:m^Z>Z£iz.£<0 s fiJfl3#3S»5Itt, mmffifzttouwfo 

^Fffi^— ^(P2h XTJ«alOa2lC*5tt5iljaiM^-^— *(P3)d»e>, al<Da3^:fctt5 

mSM^"?— 9 (P4) ;W3£-e£S££«:*l/0 ^ c 

[0376] lUa^LT, a3<Da4f£:fett5ji3ffi#^X — ^ (P5) » a3(Dgp^M^X— ^ (P6) „ & 
U«a2«>a3fci3rj-*il3ai*t^9*— 9 (PI) a2<Da4^(t^iiW^j-^( p7 ) 

[0377] i^ot, &mM<Dten<D&mM$E.tt~?h^xh. mmmmmnz}5\, ^xn. 134 

[0378] fljffl#^g51«, a^tTat— **yh!7— ^3a£r;frLT|iETOg4at-r— *£i£'S{f 
[0379] ^-C, ^^Hlfi^liE^^iElfP51a«:, ^omeo^JgO^-O-HlKi^fiEW^SE 

z>h<Dx, &mmjimzttvx£XT<DmmMmzmz-z>o 

[0380] IglO^MS^UTfi, |E0J^©4a^> ? ^^^§|514aS.tJ?m^^)W# 
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[0382] WT^m2^|iE^^I2l39^ffiV^^K-r5„ 

[0383] 4^. 2o<B;flJ/l!#S«5ARtf5BtfS, ^ii^tU ^M^iS^-fc^ 

lE^^^H"^^^ |H39(^-ra, al, a2, af^:flJffl#^M5AC^M^, b 

[0384] ^HJgOfl^tC&V ^tt, *i\ 3FlJffl#3S1S5AOa»^alC*rbT, af*ff 

[0385] si±.<D&mwte. &te<ti>mm&MRxfMfflMm&mx.tcQ> &timmw(c 

PU: Central Processing Unit) „ W9A^>f- *£JlXiirtt*5^tg£r*"-r ; 5RAM(Ra 
ndom Access Memoiy)^b&53=sBttM t^U) , Hv^^ (HD) ^©ti 

I0>fEttlHJ52arau -hia£iE«a£B*>3V M22&!E1t^B<^fE£^fct>OT-fc3 

o 



* 
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[0386] (5-2. i/?srJ*W>\¥) 

> j^hm&mwtfcmjTmzm^xte. m40Rx$m4i\z$3vz>mRi#%iWi2AA 
mmzmn-mtf, ^(nmnmrnz, m4o%.Tfm4i<Dmftbm~xhz>tzit>, 

[0387] <2-3. SEP^^^aCOT 5 — ^|Bti^fe> 

[0388] 12146}*, ^mA^mmi^tct^(Dmmu^2a{cmm^t^^—^^^^^ 

[0389] ^^f&AfC&wrte:, lE^^^^llEPJ^ma^^at-Sfct^^, fEHg|$42a_k 

fimm&tt1)\}i,x \ fEl3igi542a±{dilS^:A^7K^^-t-^J;5{c^orv >s 0 

[0390] £*~R-> ^•^A^*5ttStiEP^^g4a^ft{t5rl2l47^V^-ClftPJ-rSo I214 

&mia?>mm%^i-7v~-?- j r~hmxhz> 0 
[0391] sEB^^^at^uffl^Msi^^iiEeg^^^tt^i, mwm^bmikm 

:s^oy-Kit^ mmmm^nm ^ «) ^lEtt-rs c^s^si ioia, si 103 
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a) 0 

afcmni$titzm(kMm*frbmm~t z> ^t^si ios a ) c 

[0393] #:vve, ff^^^ii^p^J;^, v^v^mJitfv— R-e#j^{e^ff-lL-e#5t> 

(^y^Sl 107a) „ 

[0394] &vvc% mm&m&<Dmmn$zv*-*&. mm^y'-^^mm^n^x, tett 

^s/^SllOgaJo 

[0395] #C^-C\ 3^^£l£(tiJ3£^C£U ^Uffi#^®5I(Dii:Hfj^^^i:U-CfElli- 
5 1 th , 7°S1 1 05a^. tPS 1 1 09a-? Jfc#UfeJP 

— *^tffEKJ&#£rffr&U ffJffl^S5I^fs ^{^TyZfSUUa, SI 113a, 
S1115a) 0 
[0396] (^2(0^&) 

gP42a^J|5i*ib&V ^±%£<DM&iMffi*V>%l.'0U)< ^^mti~^t^X^ 0 

[0397] gi48te, ^mB^m^t^<Dmmu42a^mm^ti^-^<^umm^^-r 
mm.m22a^m^x^.mmmmm5i^tizmmm^y l —^mm.ir^mmm2 

IEti-r ; 5^2(D^5/^424a-e«^$tLTV^o ft, ^1X^20)^^^^^ 
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[0398] Z^^±m2MM<D*?V?<V?h%il<Z>X?y?fe, HtMfrh^^hflX^^y 1 —? 
#ia"Cfc'5o ^tlX-fix R. Merkle: Secrecy, Authentication, and Public Key Systems, 
UMI Research Press, 1982. <DW<— iS\Z.fcr.ftK<D;\'— b/— b'(D&\^Xi&&$t 

gL-tztzttxDnM&j^M. H( a , wmmzfrxis^tf, z.<Dnmt&^}m&io<Dx? 
[0399] ^t^, ttBK&tf%mmmm4&mft&m49%m*<^xm.W'rz>o ---r% ni49 
[0400] *1\ mnmm^mm^'mm^hmmm^.^n^>t. mmm^hm^km 

^S1121a, S1123a) 0 

[0401] #;v^ fr^^cogp^M^— ^^lco^^^ia^i^^i-^^^si 

125a) c 

[0402] ^CWC, lflii^O&HfMU ! #J^f^^^?'^7V-ASrIl©^s'^ 
f^il^P-rS (^^S1127a) 0 -£<D$U ^ffc(C^lC0^2/^(Cii*P$tlfc^y^7 

*^3>:/S1129a, SI 131a) 0 

>_y7"S1133a, S1135a, S1137a, S1139a) 0 ^©i, %rtz{Z.Ml<D*#y?l^Mj}\l£tltc 

Wi^^i^yZfS 1141a, SI 143a) 0 
[0404] #CV^ mU<7)mm^^m.5UcM^M2(D^y^hUWi^M^<Dm^M^ 
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[0405] #cwr\ m&m&&w.M&m&tu mm^mmKDW.m^m^tvx^m.'r 

Zbthi^ *Tyy*Sl I25a^.t5si USaXm^tzWmffi^—PRXfMmffiTcy* 

—^^t^um^^m^. mm^mm.5\Kmmir^(^y L y^'sn47a, sii49a, 

S1151a) 0 

[0407] *i\ |E^^g4a^Jffl#^5I^^|iEPJM^^^t, M^jfc^bJllI&^J 
^-*££j&U Hi^A^^^i?bV>y-7X^^^X4{C#J?)^-C-C, ff^ 
^^^■5(^y^°S1121a, S1123a) 0 

[0408] ^x% m&m&x4<DB.mffi7z c r— ?x&z>/— nw)<on^\m:%\<D*zy? 

foW&~fZ> (XT-yTSl 125a) 0 

[0409] &v^-e % m&mj&(o,2i)<D&wmnRxf^mm^t!x#v?7i'~M%:min 

M-t^i^iyy'S 1129a, SI 131a) 0 

[0410] #:vv-c\ ^lco^y^fciiL^/— J*tff?&irZ><D 

Xi^yy-^U—^RW, ^i©2o©7- K^KHifoS/— K(l,10)©ttW 
^71/-A A2a.&.^3a) £^l<D;*^.y^bB&#> ifEfrfc^f&L 

fc^y^7i/- A&frfcfc*^.y^:7V— ^2atLT^l<^;*^^£il;?jni-SC*^s' 

:/S1133a, S1135a, S1137a, S1139a) 0 ^r<£>^ 3|ffc(C^l<D^^^^ii^ll^fc^ 

y-^y-yu— -ftfe(Dfijffl#^g5nc*5v>r, ilLtfrg^^oW^^— *K*|-J&i- 
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M~tZ> frTvTSl 141a, SI 143a) . 
[0411] ^^OflJffi#^g5I^^i~5^2^^5/^^ll:tfr^^^X3cDff^^: 
^CX4lCj3{tSiSMM^7 ? — ^-C&^y— K(0,19)(Z)*iJ^^^2^^^y^424a(D^ 

^-r5/7°S1145a)„ 

[0412] N-e % gf S«/£X4«ri£fl&S«y£X3fcU l»$1Iffi*SHl5IOitt^f«»^423ai:b 

•nBtft-rSfc^JC, ^y^Sl 125a^.t5Sl 145a-e^#bfcgp^M^7 f -^S.t/)l 

SEM^— ^Sr^rtrSEWJES^rSrf^fifeU, f./B#§£_KH!y__flrr5 (^s^S 1147a 

, SI 149a, SI 151a) o 

[0413] m2<Djmo&mm) 

[0414] [2|50fi|iEP^^®4a<O|El3i^42a^)^|^^-ri2|-T?fe'5 o HI 50 {£^-£5 J1#C 

*3KJ*<oy — KflM __ K#J MS fit $Y&mx*v? (WTTi3:_stack£:P£ 

^mtftiMW^ffl^— ^fltiffOliB^J (^T-e(*.chain.comple_data_vec^l¥^) £ 
A{*placegPtvaluegPd»b^5o ^©5*>place«|SW:IH^#fi)*©/— WiS*t7 p 

COm^^b^So valuelf|3^^r<D/— KO#J^fiSSr(¥:^i - 5o _chain_comple.data.vecl* 
7*— ^Si||chain_comple_data(Dga^lJ"Cfe*? * ^fl|i_rchain_comple_data{ilate_cco 
mple_stack£|5, prev_pointg|k prev_point_oldlHK &I^old_tree_idg|5}6>b& ; 5o ^<£>5*5, 1 
ate_ccomple_stackgP(*_stacki:[Ilil^^^y^71x— A^kftS^y^ia'CfcO, pr 

ev^inm^Um(D^m^^M^m^(^Mm^.tcmil)^mU prev_point_ 

oid*fl.fi^<^fc*J:0ffit;:__^ 

(#A!lE$C*fctenil) old_tree_id$Rttprev_point_oldg|S^nil-t?f4^V ^ _!#p 

revj)oint_old^^^i-_^S^^^Jg^^^,^W^'J#^-(^_iiC*fcfi nil )"C 

<fe><5o 

[0415] H51fi, liEPJ^fa4afC*.{t^>all^M^^)^lllGET_REQ^i-o Z.<D^mX'&m 
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[0416] -vofi^^/v-^— ^m^n^y^m^w-r^wx^o 
[0417] • idxottf mmm^m^^mm^w-r^wx^o 

[0419] -placeO^JIII^^^ylcO/— K^m^-r^l^— ^^^i-^^^C-CfeSo 
[0420] ■sflmOfi^S'^l^— ^^^i-5^^C-efc?) 0 

[0421] • F(vO){i^^^Hl|I^IEP^^^(^mS^^/V- 7=-^v0^JI|M^^^y-^ 
[0422] •_treejdttJe^^*0«WU*#*»^^5^«rC*>5o 

[0423] 'make-stackflmCplaceO, VO^ZfU— ^placet^v^/WT*— #V0&3\%(.kl„ place 
0&placegR fcb"Cj$*> „ VO^valuegU tL^Xho^y^U— i^jgi" P^T*S>5o 

[0424] • stackMtt&&mm<nx^y?<vWM&i&W1rz,^mxlbZ> 0 

[0425] •handle_chain_comple(id0, treejdO, idxO, V0, 

prev_pointO, immed_stack_dataO, late_stack_dataO ) 
ti, HIM^^7K^^iJ^-tree_idO, ])— ^cDfgfcE'J^idxO. #J^r^— *V0, gPB#*i 
^■T— ^immed.stack.dataO, iij^ffi^^— ^late_stack_dataO^^#^$tv5^:SliE 

[0426] mwmmtetmwmMz&im-rzm^ m&&&b&ttttit ; 7 s &#A'^~*&v 

0 N H^#O|gfeSlJ#-^^id0i:L-Cr<D^|lid5^W$tl<S (^XS/^STlOla^STma 
[0427] |2|52te, |2]51C0^JliGET.REQ*^Wm$tb5, /— Kftthfjt^SO^jlECOM 

p_NODE_vALs*-*-f o ^<D^mxmm&h&n%Lj&xf^mmz&T<ntmx'&>z> 0 

[0428] •sflmlbte^s/^l^— J»&&W1rZ>$£mXfoZ>o 
[0429] -placelbtt^W— ^Sr{^i^-rS^^-Cfc6o 
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[0430] -idxlbW:SBBc*fiy*i-S3g»re*>5. 

[0431] -levlbtemm&&&-fZ>^%tX'&Z> 0 

[0432] •vallb«7 f ^/v-7 f — ?mi%n'^y^W*i%WirzM%re$>z>o 

[0433] • sflm0b{i^.^s/^^ J**$kW-$~Z>$£.%£VfoZ>o 
[0434] -placeOb^^Ix— ^^^pi-S^fc-Cfc^o 

[0435] -levObriSE^fc&ift^i-saESSre&So 

[0436] • lev_nw / S.I^idx_nw{iS^CSri* : ^i-5^^:-e$>5o 

[0437] •floorOOli^^bcSr^iafetb'C, x^ffi^v ^**<08E#&3gi-|8»rC*>3o £bf-y 

OlCfcfVC, flooKx, y) = flooKx/y)t#< 0 BP*», floor(x, y)fix£y-eS"lofc^O 
[0438] •hash_comb2(val0, vall){4t*^h^J^^$tb^2o<D^v ? ^/V'7 ? — ^valOtvall^rdl 

jfcirU valo£vall&5i8SU 3f3fe^>y^»IB»<SHAl4*)SriifflbfclS**3g-t-B8 

[0439] 053tt, Bl51<D^|l|lGET_REQ^T^|2l52(^^)liCOMP_NODE_VALS^^l¥t^tU 

[0440] -placeteTV— *%fi^i-5&#rC*>9* sHml4^^'7l'- ASr^-TS^"C 
[0441] Md^ffl^^US-^Sr^-rSEafeSr^^^Sfe-Cfc*. 

[0442] • Ntta»$nfcfijffi*©ii»**w-r*ag»["c*>*o 

[0443] •auth_nodej)l(prev_point, place)}* Jll^y— ^O^S^-^-CfeS prevj)oint£:7V 
— ^place^eiiCtb.place^^J^^VevjointOiS^^^^^^feS^^t 
(DX*frtimrue&£i>i£fth\tMse&MTffl%C?ibZ> 0 place = 0, OfcUfc£#, auth_ j 
node_pl(prev_point, place)# s truei&5fc^O;fr^H-5>^#{3u floor(prev_point,2 i )^ s 
Mr^M = floor(prev_point,2 i )+l^^rt-efea o 

[0444] ^{c, m54Rm.m56%0mvtj:&b, l^mmmm^m^, &Mmw\m\z*ti- 
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121 55X*tZm& titers* S^— ^ VTERMINATE.STREE.SUBl t M 56-CfB*B£;tXfclJ- 
ZffV— ^>TERMINATE_STREE_SUB2£^lfT^ i^MMML treejd%ltctf^?V* 
^1>U 2O(D^C^^^_lev0_ptrt_stack^^'fbbfcm^-Ti-S„ ^flh<D±.^M.W. 
i*IH51-^fE^bfc^)li GET_REQ-Cffi V ^t£b<DX*h% 0 
[0446] IH55"CiEi&*t"^)TERMINATE_STREE_SUBl i4 s ^rO^I^F^Pi^i^-Ti - ^^^^ 

[0447] El57^#MU/cC^b, TERMINATE_STREE_SUBl<D|r!jf££ N #^(Dt>ta{-l'JUT 

ASttl^^^raPS^II-TU, TERMINATE_STREE_SUBlSrl^U ; mi~^aSr#X. ; 5o 
P^^(DI^^Ti*_stack<D^^« % H^j5»fc>>i/C[(l, 4), V(l, 4)]£[(3, 0), V(3, 0)]<lr 
"^■tft>tf>i:;£o-CV^ 0 #Jli TERMINATE_STREE_SUBl[£j;^ A-K (1,5)£(2, 3){£ 

^j^t<£> (i) ~ (4) ^-r«t5^-e#s 0 

[0448] (D^y^ST^llatCit), MBf^sfinLxb^Kl, 4), V(l, 4)]^^$tb. _stack 
i*[(3, 0), V(3, 0)]<D&fr^t£h<Dkti:Z> o m^^y^ST12l2aiZ.XVmm^Wi:place_ 

[0449] ^y^ST^lSatii idx.xbtimmfa&fafDmfe&'tZtf. $tf£<Didx_xb<Dilg.m 

[0450] ^^^ST1214a-^f4_stack/5>nil-efc§^^S : ^^J^-r2>d s > _stackh* nirm&V^ 

-e^^^ST1215a(Ciiti> 0 
[0451] ^s/7°ST1215a-t?fi N ^Bf^^Clev_xbtCl^^L, val_xb{CV(l, 4) £^^U idx. 

lb^l+4 - 5Sr^^i-^ 0 place_lbt'(lev_xb, idx_lb) - (1, 5)£i£^ 0 

s^yi/*.i\M.&ftW't-Z>m%L dummy_hash£PgWcU ^<D^{it£dum_vaUbf;i|2^: 
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make-stackflm(place_lb, dum_val_lb) - [(1, 5), dum_val_lb] 
StK^S. ri-Cmake.stackflmf*/— Y<DfcWffiWib'^i'^tt\%t.hL,X*9v 
?Z7U—£,&£.J&-fZ>m%cefoZ> 0 Cr-Cplac_lbtsfinLlb £r§|$ctb-tREGISTER_C 
OMPLE.DATA (|2|53-C5£iiL/ct><D) SrP^tWTo 
[0452] jj^V vC x ^^7°ST1216a^*3V vf % lev_nw{£2£rt&;£U idx.nw}C floor(idx_xb, 2) 
= floor(4, 2) = 2£r^3tU £bf£place_nw«2, 2) Sr^^i-^o ^cV^T, val_nw[Cha 
sh_comb2(vaUb, dum_vaLlb)^^-T?)o hash_comb2{*2oCD^^y^3.^Sr?|^:ib 
^fe£5S^U Bf^^^^^^K^C^Mfflbfc^m^Mi-Pifc-efeSo sfmLnw 
{Cmake-stackflm(place_nw, val_nw)$r^^b % sfmLnw ; Sr_stackl3:7 P 5'V'3.i"So "tU" 
£«9, _stackte[(2, 2), V(2,2)], [(3, 0), V(3, 0)] Z*£tfM)&bteZ>o H{-place_nw£sftnl_ 
nw^^l^CiUTREGISTER.COMPLE.DATA^rl^-CPttl-t-o ^-e;*7V:/ST1211a{£ 

[0453] (2)^X5'7 P ST1211a{C*5V^-t_stack^l07K5/7 P L, sflm_xb{^[(2, 2), V(2, 2)]£rl£ 
^-TSo (r^X-_stack(D^^Si. [(3, 0), V(3, 0)]bteZ> o )H^place_xbK(2, 2)£. idx_ 

xb(£2£f3:^-r5o 
[0454] ;^$/^ST1213af£:i3V^Tidxjcb<D{il2te{^ 

stackfinil-C^^V^(^-e s £bfc;*^s/;/ST1215a{;iitti>o levjcbf^Srtx/tU val.xb 

(^V(2, 2)^^^U> idx_lb^3^^b, place_lMC(2, 3)£r|3:^U dum_vaLlb{£dum 

myJiashOiSUitSr^^U ^fii3rV(2, 3)t^-To £"b^sfml_lM£ 

make-stackflm(place_lb, dum_val.lb) = [(2, 3), V(2, 3)] 

^rlS^i"^., rr-T?place_lb£sfmUb£r3I^LT REGISTER.COMPLE.DATA^rl^ 

[0455] vt> ;^;/;/ST1216al£:i3V v-£\ lev_nw^3^^L, idx_nwf£ flooKval.xb, 2) 

= floor(2, 2) = lZmfels, £b{£place_nw^(3, 1) £fx^i-<5 0 S^T, val.nw^ha 
sh_comb2(val_xb, dum_vaUb)&rl3:;£L, ^K^fjt^VO, l)iH<o sfml_nw(£rnake-stack 
flm((3, 1), V(3, l))£r^;£U sMjiw^jstackfc:^^--^,, CtU^*?, _stacki£[(3, 
1), V(3,l)], [(3, 0), V(3, 0)] &*&&Mf&bft% 0 £bKplace_nwtsfml_nw£3l^£:LT 
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REGISTER.C OMPLE.DATA&rP^tF tB ~t~ 0 Z.ZrCXT-y7'ST121 lalCmZo 
[0456] (3)^.xs/^ST1211a(C*DVN-C.stack$rl07K5/7°b, sflmjcb^[(3, 1), V(3, 1)] 

feirZ> 0 LstackO^flStt, CO, 0), V(3, 0)] iftotV>5. place_xbt£(3, 1)£ 

KJtU idx_xb{Cl^^i-«. 0 
[0457] ST1213alC*3V^-Cidbucb(DfiIlf*^i:^J^$^ ST1217alCil^ % levjcb tC3^1S 

JSU val_xbt^V(3, DSrKS-t-So jtackS^y^b^y^il/fcCO, 0), V(3, 0)]£rsfml 

0bizmi£1rZ) o place_0b[C(3, 0)£, lev_0M£3£\ idx.OMCOS:, vaL0MCV(3, 0) 

[0458] ;*7 1 s':7 B ST1218a&C;}3l v 'C % lev_nw^4§r|3^U indx_nwKlfloor(l, 2) = O&flK^U 
placejiwtC (4, 0)£^^U val_nw{£ hash_comb2(V(3,0), V(3,l))&Wtfe-rZ>o -COffi 
£:V(4, 0)£-f£> o sftnl_nw{Cmake-stackflm((4, 0), V(4, O^tS^b, sfml_nw§r_stack 
\Z.-f^y^T^> 0 ^tb^i«9, _stackii[(4,0), V(4, 0)]£^tf1fi/&£#3o $kl£place_n 
w^sftnl.nw ^r^|^Ctb-CREGISTER_COMPLE_DATA^rl¥t5Ui-t"o ^"C^yT'STl 
211a(ClM5o 

[0459] (4) Xv l y7 p ST121 lafc*3V .stacker lO#y^U sflmjcbfcl [(4, 0), V(4, 0)]Sr 
^^-T5 0 (jstackO^flRlinil^^oTV^o )&£>t£, place.xb[C(4, ©SrKJtU idx_x 
b^O^^-TSo ^2/^ST1213a^*5VN-Cidx_xbCOfiiO{if||^i:^J^f$iX> *T?r/S 
T1214a{^it^_stack{inil-efc^)CD-t? % *xs/:/ST1219a[£jt^ jgUti-V(4, 0)£rK 

■So 

[0460] H|56-e|E5j6$tbfei^^'/V'— ^>TERMINATE3TREEjSUB2teo^-CSfc9!-t- 

[0461] *fWT©^t*5i^ii:^ftffl$Mo 

•ElSOOiiMtt^ffl^^y^^SB^U-Chain.comple.data.vecO^^^tl^C^^Sr 
^Ochain_comple_data2 



* 
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•#A^^*fc^nil^^-t-S^^Cprev_chain_point2 0 
[0463] &{£TERMINATE_STREE_SUB2tf>H)fN;:oV ^Xm.W1rZ> 0 
[0464] id =0, —, N-l{doV^-Cia560^ f t25/^l^^Ti-So 

[0465] ^ny^io^-efiWT^K^^r-fSo 

[0466] chain_comple_data2 &£_chainjx>mplejiata_vec[id]£i£:^L^ prev_chain_point2 f^chain 

_comple_data2<Dprev_point§P^BS^i-S (^5/^°ST1222a) „ 
[0467] prev_chain_point2^niir'S>tlf^n^^^$|-T-r ; 5 (^y^ST1223a), 
[0468] $1i^fttt(i^ chain_comple_data2(Dprevj5oint_old$lS^prev_chain_point2(C, prev_p 
ointgBSrnM^ old_tree§|Sl^ia^E^|t)7KfiSIJT-tr#^^^b, ^^_chain_comple.d 
ata_vec[id]^chain.comple_data2^^i-S (^.^s/^ST1224a) 0 

[0469] <5-4. mm#$kM5lte&tfZ>^?!)*y?j\'$E£:4k> 

[0470] (-tv^y^i^MHB'JS^b) 

[0471] >a f^fc5**braiBi©ifeo^raiHo*^»»^^fcstf?, s8w>&*&iwihi 

[0472] ^KRSIO^^, iroWJt^iS^af^-eicafeUfeaft^O^^S: a(0), a(l), - 
[0473] |2158^#fiib-C, J^^Jlft^^V^htJgft^/J^^OV^r^WtClftK^o 

[0474] afiPi£tii<Dmmmm\zhz>k&. awv-7&-%-m&m%o*mu atcor.mmm. 
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{£*5V ^-Cttkd), k(2), ■■■MmWtz&^Xlfr&^h&klrzmi'&'i^imtfib-? 

5) 0 058l£^-Cii, m = 4bLX\,^Z> 0 k(m)J3:0-et>J:C k(l) > k(2) > k( 

3) > ••• > k&owefe*ttftrifcfcfcv\ z.<Dt%, ±MWkmb7*^^v\^m-tz> 

nmg<DMlfcMm'h*<DV—7<Dmm kM bteZo m58\Z^Xti. ST2(1), ST2( 

[0475] -Y^y^^/MBSU^^bfcttx it^ttfca e {a(0), a(l), —, a(n)}[uOV>T, J£A 
T^th^ (1) ~ (3) &ft?Z.kXlbZ> 0 

C0476] (i)a*sjR-t"5«R»:^/jN*ST(3.=:— ^^^*5)SrtfJ|[-r5 0 

[0477] (2)JI|M^^J^V^h{-^VNTJif6STJ:t)&(-{i*-r^lofo5VNi4^^Jlli^ 
A^/J^O/V— hO#J^^, a(0), adiXXWt'lltSl^f- 

[0478] (3)ST{C*3it ; 5a(^BIiE^^$rauthPathST(a)i*5<i:> authPathST(a) l^mirS/— 
K0>*£tt«\ a(0), adiXXT^aO-C^i-SW^-^^btf-^i-^o 

[0479] fsj, 4^v^^m%^^t<DMmn. &T\zMmtt : &v$jSM&M%)*&M 

[0480] 059tt, ^^^JiR^^<D^^||||s.^ilSWi-t > <D-efc5o -<Z>5*>, & 

fey— K-C*>So ^.^^JlM^cA^JTtc^rCSTi^L, CSTtCjo^^aO^fiE^^^.^r authP 
athCST(a)t*5< 0 £0>£§\ ^^y^^faflJ^fteHU tg^^tbfea <= {a(0), a( 
1), — , a(n)} t£OV^, authPathCST(a)^JSU K^«i|Sflt*Sjfe*oXV^y— K<0 
#J MSfll«\ a(0), • ••, a(n) CRtfaf) ^##^§16^— ^fctfll^SrfcfclTO^fe 

So 

[0481] ifik IHft*3l&7*^KZ>y— z7<D&<nmW&KbVk.b%, $LmMmftMffi*<£>& 



WO 2006/019143 



100 



PCT/JP2005/015085 



[0482] ±m*itz.b&&-&*.x* m2<ommm*WLWumz%\z.mz>t. se^a^u 

[0483] m^, igeos^iaei^^u^^b^^^y^^/^^SiHbcoibf^t-ov^r 

•So 

[0484] *T , S^^att9»Mo»»^T?^^MIHllJ:Jlli-S»»^aSrlo»^i-5 

(xVrs>^S510a) o |!I61{^i-)l|g^^^^V^b^*3V>Tf4, ^^^1801;— 
F(0,18))£a£UTV^ o 
[0485] S»^adSJR-f-5«g35c^J/J^STS:tH|ti-5 (^^7°S520a) „ 12161 

«S^**J7*^hJc:*3V ^Xti, ffif&gr&imikMlfo'bXiDoib&frtem @ <£>ST2(2) 

[0486] &m&a<VSTl~&rtZ>&MMMU'<X/— KsSrtHfc-t-* C*^3'7 p S530a) 0 

06itc^-t-)K2fe^^7*u^hH:*5V ^-cii, >f ^9*y^i9©y — 7 (y— K(0, 19)) t 
l"<A20Vf>'?V^;*5©y— K ( (y— K(2,5)) *SiiM^liE/^y— «C5 0 
[0487] ^jg^lE/^/— KsO^##^^^^*t^:^-r ; 5(^^y7 P S540a) 0 

[0488] &m&a0tf-t§-X.tbtltcb%, ^(DauthPath(aO)-eW^/>j<^/— K(j, s(j))<D#J ^ fltVQ, 

s(j))^th^i-^fc«) {c+^if **^9*-^d»biiCgS^"TH?536**>5V MSR^ 

[0489] 0!l?Lfc£, ^37(^-f")l®^j^7tc}C*3V vT. &&&X3&l*Z.tbtltcb%. jlM*ft5£ 

t 5 — ^©loT-fcsy- K(o,i9)(D^##M^«s &m&x3(y— K(o,i8)), Jfrn* 



1 
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•YS^Ari, &m&X4V— K(0,21))^S o £fc, ^^X3d5#x.fetu/ci:t, IP 

nm-^rf— ?<Di^-?hz>y—h' (4,0) oix##M^S.^#^5:>'^f4, 

[0490] X^y7S540aX*fc7££*LtcMn&mjil&^k\^ #^|iE/^7-KsOfiJ^ 

(^y^S550a) 0 

[0491] £JLkKl£^ &m&a\~&tf5^?y^?^^k<nt&&&fcT^ C\<DfjrW^ 

[0492] M>?v^?;vmm$o±<[t<Dmmw) 

[0493] £1* , JlK^^/jN7KST^^^-r^tf-^^JliF0REST_SST^ia62tC^i- o ^tU2, 

[0494] ~<Dmmx*mm£ftz&mRxfmm*!^T<Db&<9x>ibz> 0 

[0495] -A^iLTIi, y-^f^iJ-Pa(#^S^c) , ffi^^Of&SU^-fin (#il«c) 

, a^SJg-t-^JIg^^j/jNTfccD— #&0Dy— ^f^SU^-last (^It) 
•^t£LTte, ^^^^p-rS^^rest, ht, leaf.num 

-Kffl$tt5P^i:bT, log (x)fi, log (xJEtT^i^iOlS, expt(x, y)IS, xCDyfH 

2 2 

-OTVi^yx^ii. y-:7fi£SU^a(#;flS^)^^^co!f$U^ fin (^AI 

(7)^ij^start m-hmm t-^^mt-sy-^B&sij^-iast m^mm ©ia 

^m^i-^^-efeSo ^^^JlR^A^^J^STOy— ^CD#[{i, ]ast-start+l<t#9 
, ^<D)l|I&^$/h7K<£>rfti£te\ log (last- start + 1)£&5 0 

2 

[0496] ia6i-e^bfc,Sr#:F!J^ov>T, [i^o^-iii^ffli-s^T^J^^&So y— ^ 
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[0497] ^^y^^^tetc&ftsfSfiE/W— KfJ^ffito®t##^^^^ 

[0498] El64{i, ^)lHDECIDE_GET_POINT_A(C4oV^T'te^tt57 :f — ^^att^ifcCD— §B 
£r^-f~o ^^chaindatateleafjndexg^ rgt_value§P, immediate^, lategP/^b 

[0499] rO^|lg^ffi$nS^(Dftll<D^^U?P^:i4^TCOi;*3«9T?foSo 

[0500] • ^#Cchiandata.store^^^#:^M(Dga?lJ-e, ffi5>J©£-® £f #9*— ^Ifjitchaindat 

[0501] • chaindata0^T f — ^1#3gchaindata$r{*r^Fi-S^#:-efc5o 

[0502] -a0tt:JlE#c3yfr*tf>y— ^ffifeSIJ-T-^^-r^C^^i-S^fC-CfeSo 

[0503] •flRfc^*©,'— KG.0fc«Vt, subTree(j, OfSQ, OSr/^hfc-f^SfcllRfc* 

[0504] •Jli^^^J^OSP^'^ST^^J-U-C, leafs(ST)»ST^!;— ^O^-a-^^-To fllfctf, 1 
eafs(subTree0, i)){3:g|S#7KsubTree0\ i)<Dy— ^tf>^fc^-efc<5 0 *fc, height(ST)fiST 

[0505] ^cir, m63\^ir^^])^^^^^it<Dmm^^y— K#]i3 

^^|li(DECIDE_GET_POINT_A)cDT/V^yX^<^1S«a^l2l65{^^i-|2l ; lr l bt(-ia 

[0506] ^r%af^©^^^i^a#^c^^^^^hrt<^JlH^»J/J^<^5^a0^^-f- 

t><£>£STi:*5< (aO e leafs(ST)) 0 
[0507] STftc^aOtDfglE^^authPathSTteO)^^ 

authPathST(aO) = [(0, s(0)), (1, s(l)), — , (k — 1, s(k -1))] 
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Wh. k = height(ST)„ )£ATX*te, #A^gCn, mt^LT, [n-m]ttn^±«T 

[0508] #j e [0- •• k- l]tc^LT, 0, s(j))j&S£©»*J&©tt^*— ^*»e>tmt-c***»sr 

[0509] rtPathSTteO^STl^tt^a^/V— W^*<b:*3#, 

rtPathST(aO) = [(0, r(0)) ( (1, KD), — . Ck-1, Kk-l)), (k, Kk))] 
bir5> 0 r(0) = aO , root(ST) = (k, r(k)) XtbZ> 0 j e [0--k- l]£rr5 0 
[0510] (1)0, r(j))^(j+l, Kj+l))01eft-child-C$>5i# 

s(j) = r(j)+l -CfoO, (J. s(j)){*(h-l, r(jH))(Oright-child-e$>So leafs(subTree(j, r(j))) 

{£Mi-5^5fc3£^?;<7> , } 1 -e, ibti^l^E-r^^^rW-*^. aitg< 0 

[0511] (l-l)al * af(Db% 

[0512] (1-1 — l)a2 e leafs(subTree(j, s(j)))<Z>i# 

leafs(subTreeO, s0)){CjR-T<5g5*:S»^-C*t>*l^fll'f-S 1 b<Z>Sra3 tg< 0 
[0513] (1 - 1- 1- l)a3 = last(leais(subTree(j, s(j)))-e&5££ (EI65 (a) 3r#$0 

gP^FM^^— ^immedData(a3)te, subTree(j, sGW-^itMOQ^^MTuT^— ^cm 
pltData(subTree(j, s(j)), a3)£r^tf 0 lot, 

immedData(a3) h VO, s(j)) 
(ft, X h Yr±, X frhYt>m%X^Z>Z.t*i&~to ) 

[0514] (l-l-l-2)a3 ^= last(leafs(subTreeO, s(j)))-Cfc5t# 
(l-l-l-2-l)a3 =£ aft?fc5£# (12165 (b)£#J®) 

a3O^(D^^^^^^a4ie< 0 (a3 aPfctfTC, ^0<t5^a4^$,§ 0 a 4 ^ af„ a4 

aSc^^iSfpE^Ol^/l^j' W5t, j' ^ j+1 
fot, JH5fe^#*J*©tt®tCj:«J, V(j, s(j))i*a3T*^#f SIPNr^^T 2 — a4T? 
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immedData(a3)UlateData(a3,a4) h VQ, s(p) 
(ifiU a&a30>a4fcJ:5fB5Ej&£rt"5i:» immedData(a4)^f4V(a)^AoXV , >5^ s , Cltb 

awa s(j» fcttRbfcv ) 

4 < an?&>5 0 

[0515] (l-l-l-2-2)a3 = afT?«>«^(H65(c)S:#flg) 

[0516] xox, sraa 8 ($)&isttz.bnm\t\ moxz.<D£5t£m&t£&>9W&\ 

[0517] ( 1 - 1 - 2) a2 e leafs(subTree(j, s(j)))-mfcV (12165 (d) £#f&) 

V(j, s(j)) e .lateData(al, a2)X&>& 0 
[0518] V(j, s(j))0^##m^C^aU VO, s(i))<D$l&?'(Vs?'&.&a2£LX£\<\ 
[0519] al ^ af#>-oa2 ^ af 

(l-2)al = afT*£>5££(l265(e)3r#J$) 0 

[0520] afttffj£jftiB^irt-*«*Jc«F*7*V'^hrt»!iO, s(j))«r&tr>IS3fc&*<J/h 

[0521] J:or,STH:0,s(p)Sr&tfrfcrt«SV^ 0 fieor,ioJ:5*^^5#*v\ 

[0522] (2) 0, r(j))^S(j+i, Kj+l))<^right-childX'fe5^# (065 (f) 

Kj) = s(0+l"C*>«3, 0, s(j))te(j+l, r(j+l))<D\eft-chMXh% 0 
[0523] VO, s(j)) e immedData(a) 

VO, s(j))(O^##M^;*3J;U ? ^#^-f^^^*f-a0tbXJ;V\ a0^ af 

^ft^Jg (DECIDE j3ET_POINT_A) tt % ^TOJt^#tt&#JtLfc3MIH£fco 

[0524] 5?*^^Ca*S-%-^b^ci#, ; &<7>authPath(a) W</Uj©>— KG, 

a(j))cD#J«9^T'fiiyO, a(j))^ff^i-5#JlR COMPLETION_SUBl^Hl'66{C^i-({a.U 

» o ^ j < vxmm^Mm^<r>-m^\ mra, mToo^-r^sssoa^tp'^jcui^ 



p 
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[0525] Z<D^m^i&mZte&&RXfim&K]&T<Db&*)T*$yS>o 

[0526] • chaindataO^T^chdndatal}* v^— ^^^chaindata^Sfi-S^^C-efeSo 

[0527] MmmedDatal&t5lateDatal«-r— ?m&st&cMm(DmMV^Y*&n^%&WX*fo 

[0528] -chaindatBLStore«:^fiEO^|#&»iratC*3Jt5x ^M^K^TM^tL-tg 
ft Lfc^r — ?%&®l1rZ>ffi?\lX*&Z> 0 E#l©#IS3|f tt* H^T^abTeichaindatatf) 

[0529] (l)*^Jl|Mf*20<^ei^:(A^)^"b. Hltf>3li&£Sfi^J chaindata.storetfMndex 
01a) o 

[0530] (2) M0f ^^chaindata6f£chaindata_store[iO]£l2:^L (^>x^S5502a) , MW & 
#CaO£chaindataltfMeaf_indexg|5£L (^fy ^S5503a) „ ^^al ^authPath(a0)OW^< 
/>j0V~ K<7>index^^i-^ (^y^°S5504a) 0 

[0531] (3)m63\z.m&(Dmm/<*s—h^mm<nMn&M&&:M^m decide_point_ 

AlZ£<9V(j, a0)<^^##M^a2(^^«(DloT% -?rO^-C#btbfcj*^«^ 

y*—*frtb* V(j, a(j»*SfhdSt-Ct5t>©)Sr«fc^r5(^S'^ , S5505a). 
[0532] (4) SB?Uchaindata_store£TgJ^U leafjndex&$;aSa2^fc5J;5&SB^J^^indexi 

*S«E»[il*«fcS'f-* (^y^S5506a) o 
[0533] (5) ^^Cchaindatal (Cchaindata_store[il]^^^-rS(^»'7 i 5'^ P S5507a) o 
[0534] (6) 2£|fcrgt_vall {CchaindatalGDrgt.valgB^ ggifcimmedDatal IC chaindataKDimme 

diatelffS^, f£^lateDatal^chaindatal<£>latei$£\ ^-*^^-t-^>(^^7°S5508a) o 

(7)rgt_valK immedDatal, ^21ateDatal^placeg|5^G\ & V)hteZ>*?V?7\s 
— ^^-g-^tt^^^^J^-t-S (S5509a) o 
[0535] (7-l)-&*ltfM*, ; eoiii^-r(^5/7 0 S5510a) 0 
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[0536] (7-2)-^**l,;ftV^#rau immedDataltlateDatal^b, 'y^aRHRS^UTW*; 

-e#5/— K^)#J^fig^-<^0*^v^/H*"^)iI^ff^t _ ^(^'7"y^s55iia) o 

to537] (7-2-D ±mxmifc$\-M£frtdm*)%xmz. vo, aoo^-g-ms^^^j^-r 

§(^-ry ^855123)0 

[0538] (7-2-l-l)-^**Uxf;f, ^rOfSSrMf (^-r^S5513a) 0 

[0539] (7-2-l-2)^*tt^ittK^ ^i-5(^^S5514a) 0 

[0540] l367Ji N ^i£^&a^£kttft£§\ ^t<DauthPath(a)K^tl^U^<M(Dy~- 

KG", a(j))0#J9^XffiV(j, a(j))(^y^h 

[V(0, a(0)), V(l, a(l)). V(k-1, a(k-l))] 
^tf-^-r^^)l|MCOMPLETION_SUBl^-r({S.U, 0 ^ j < k-Ck«:Jli#;^fe&}7fc<£> 

[0541] •k^JlE^cA^J^Oi^^fr-So 

[0542] • auth_node_valsfiS$k<DBE^JT% ^-iH^JH^I^^y^^'lESr^-rStj^t-rSo 
[0543] *i\ |2|66<OCOMPLETION_SUBl£r#j (0^j<k)f£jg/BU authPath(a) lZ.m~f 

KOSfl^teSrtHICb, fi-^^^:^auth.node_vals[j](^|&^-r5 (^s/^°S552 
3a, S5524a) 0 

[0544] authjiodevalsSrig^il.hU ^T"t"S (^^S5525a) 0 

[0545] WisMX/9Af— S^^b) 

^t^o fiP*>, — 3S<D^^a(0), a(l), a(n)^-r(C*fLT±fe<D^^^y^^ 

[0546] -r^y^>^/v-^^^k^, ±3^Lfc^^^i^gs.^a^fflv^fcWT<^#)li^-<fc 
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[0547] (l)a(O), a(n)£, *>53M&RaiHlK:JRi"3* *>3?IJffl#3gg5HH±5— 3I<D»» 

[0548] (2)5pJffl#Slfli5HCj:5a(n)©*<^««^Srafc-t- 5 0 afrtai#/£ ,, C*>o"Ct>J:V\, 
[0549] (3) |2l68-e|Bsl!Lfc^JliCOMPLETION_BULK_BACKWARDl(Cj;l9, #a = a(n), 

— , a(0)£r, vKDjlit^-f^^y^^y^^-fb^TPo 
[0550] r<Z>#JI|mc«fc«5, #&^a(n-i)({&U=0, i0fc#LTaf3rtfJ&fci8j&£Ui:t& 

#:^$J/h7*cST2^JlU afteST20#y— 7J;0t>*{c{fcfii"5»^S:#^.5. — 

[0551] i=0, — , nlCOV>t, ^)liCOMPLETION_BULK_BACKWARDK^«t«9iI^P$ixfc 1 b 
O^tfa(n-0OjgM«^~ aCn-OT-gfSUfcgPNfffi^T 5 — a 

[0552] (DMfthfe^^— * 

l=0<Db%$:^7LZ>o Z.<Dk%. a(n-i) = a(n)-?h% 0 3MlCOMPLETION_BULK_B 
ACKWARD 1 \C£ , a(n) {^LTteafO^MStf) #1 T l-*3 5a(n)<DMi§ 

®tt^^~^^n£tb5(l2l68<7x*^s/7 B S5003a) o rr-e, afo^lt&iJSo^t-T 

Bfrftfcasv ttWJ^JKl/J^O/V— Httttfltofebrv ^<*>T\ ^COMPLETION. 
BULK_BACKWARD 1 iiAnSJtfcfciBSr^tf a(n)03lS£M^9*— a(n)t§ 
ffUfcIPl^ffi^V 5 — ^CO-a-^fi, a(n)<DST2 lC*5»t5^XO»SE/^/— KO*H ^ fit 

[0553] (2)m^^y^ 

il e {0, —, n-l}£U i = iltbfcit, ^HiCOMPLETION_BULK_BACKWARD 

i iz. £v m p$ titch <d ^tp a (n - oomm «r^*- * t > a( n - o-csw ufcsp n#« 

v^ot^-TSc i =il + nc*rUTt>l^l^it*SjiJ&Scoii:Sr^-*tfJ:v\ C^ri 
12, WToJ;5ic^^ftScSfel^fflv^i:{c±i?^t^^-e#5 0 
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[0554] a2 = a(n-il), al = a(n-(il + l))i*3#. al<Da2fc£Z>MU& : & AP(al, a2X ^<D 

K£AP'(al, a2\ $b^AP(al, a2)<DW<^£jl<bM< (El70£r#fig)„ 
[0555] ^Tr^^SlllM^^^CCO^KfCj;?), |l|S^^/J^ST2lC*5^aKZ)ST2(C^o 
ttSfgSE' K<D?ibl<"</V#jl J;«3/Jn$V ^^f^HtiS:, |2|68<D^S'7 e S5004a 

[0556] al(DST2(Cfe^^lE^^y^K09^^^^ji{^UV^<D(D#J^'fji:(i, EI68 

<^^^^ P S5007k{CSoV>Tii*P$tv5T ? — ^(^*tLS 0 
[0557] aKDST2^*5{t5f&fiE^/— K05^^^^jli^^V^^<^#J^llt^^ H168 

(D^^yssoosafc^^Til^p^s^— ^tC^tL^o 

[0558] ^_kW;^ ^JIlCOMPLETION.BULK_BACKWARDU'j;?)^P$tlfc 1 bOSr^tf 
al = a(n-(i+l))(^al®tt^X-^ta(n-(i+l)K^fbfciPNfM^-^^ 
a(n-(i + l))<^ST2t£;fctt5:£T<^gfE/-?*/— KO#J^j|t^tfw<t^^^ 

[0559] £Lh(l),&t/(2) i=0, n ^oV>T, ^HlCOMPLETION_BULK_BACK 

gp ^M^X— ^^-a-Wfi^ a(n - i)(DST2 (C43itS^:T<D^|iE^^7— KO#J ^ M^r 

[0560] fc*5 % |ll#<D!(*«ft&{Cj;«9, H68<D^7 l s'^S5006a-e^3£3|***S NO fc&*5, ^7 

[0561] o^yoawfc) 

±M<Dm%^—^^%m<D^) lz:M&-i&tr ' b&X-gfo ^m&ltt, «T©^ 

[0562] ±m<D$tm-z. vxr<D7sry7{\) ~ (5) \z.$y)nt>M 0 
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[0563] (i)&5Mffifflm\z&5mm&mm5i&&m^izffi&—*<n5%fr^ &m&<d 
[0564] rasi^m-rsfc'fto^fcb-c, ra^i^raiBfc^ESESan^^b, s»^<z> 

[0565] (2)S«^©^>^y^*S|^5ra5ltttW^— ^©^^y^^*^^^ 
[0566] H72tci^Jl#ttic&vvrtt\ WlflfriftW^— B <©^y f y^0i2# 

*5i:3# @ (D^^y^X10t^*tufc^>'7 ? 5/^^o^®:^;^fe^2(D^gff 

[0567] (3)'_hlB (2) T?»jfc£;h,fc#«3r? , --* r «r, *<D^j^— *©*fc£te(fc«-*-S« 

vel(AP(a, al))J;«9i£VNl^^</K^t><^^*J-LT«, *©«!Ste«:tHM"3wWS-?#3o 
[0569] g|72{^-f JWWIfciaaV vftt* r^Bf^— ^O^^f^^kOfttatCiOx 

7*s>^0©S^£OitM*ft^— *<tLT, /— K(l, 0), (2, 1) ©#J^teastH¥$ 
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[0570] co^fr- ^zm^^m^^Mh^i^m^h<Dn^r^^5<D^m 

&X~m~tL&alkm<t, Z.<Dmffi7 s —?lZ.mirZ>&%.U.<lka.K^^X, leveKAPfe, 
al))J;9/h^W</Vtf5^fiE^;*>/— ^<D^mW.t^%X^ 0 0fl*.li, aSr-f^s^ 
*0tf>3£^££-r<5^ AP(a, al) tt(3 ( 0)-Cfc<9, a<DfME^;*/— Ktf>5^V--</1^3± 
?)/Jn$V vb<D(0, 0), (1, 0), (2, \)(D^m\m:^nX*%Z> 0 aOalf^ttSiiMW^ 

— o), (2, i)<^fij^{it-efcso-e, ai^fc^oftSjiMM^— >i4tf»-c 

[0571] (4)_hfiE(3)0^a<D^m. r^5l^^ft^l±^7 f -^^52o0^^alia2^CoV^ 
XmtZ<DmVf\^7K±.'\k<»M^/V--=?-l/ COMPLETION.MAINlSriSfflU 

[0572] |2|74T^i-Jt:#F!ltc::feV^ra, P^^l^ffi^— ^O-T^^^O, 1, 2tf>3£^,& 
, IP*>s ^#-^-1, 11, 3(D^,&(Dra#0^£:>ft<HTV\ ^^©3oOli|^ 

?<D^^y?X0<D&m&<Dmm/<xy--hl'3; (0, 0), (1, 1), (2, 1), (3, 1), (4, 1)X 

[0573] (5) _hiE o) xm^tzmm^^ntcmm t, _tte (4) xmmv 

o 

[0574] mm^~^<Dxm^it<D^m^ m^<m^T(Dm<9X3bz> 0 

[0575] (5-l)hZ>mffiy £ —?<D&m&&a(0), a(l), a(n) = alb-fZ>b%. al<D±X<D 
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V(0), V(l), v(k-i) t-fz> 0 

[0576] (5-2)toT, al<D;]s~W<*\zmir&&y~V<Dm^m>ttW-e%Z><> ^tl& 

V'(0), V'(l), V'(k-l), V'(k) i-TSo 
[0577] (5-3) £-a = a(0), — , afc-l)Co^t, atf>al KlJ:5i&IiL&i5:AP(a, al)iU kl 

. = level(AP(a, a(n))i:*5< 0 
[0578] (5-4)^5/^(3)^19, &<DMmEs<x;— F<D?1?U'</l'&\i\£*)'h£^i><D<0%i 

[0579] (5-5)*fc % l/-<^SklOOa^fiE/^y— KfialCD^— h^^t-Mi"^/— Kt?l/ 

-2)-eW-^bfcV'(kl)^5o 
[0580] (5-6)kl < j < kt&5jf-oV^-C, aOjEfl/W— K^^W^W^^l** a 
KDmsSs**/— b'(D^)ibCOU^</^7m<Dh<Dt— Weirdo |ot, ^©SffifS;*/— K 

■ (Dwmm*. ±i5(5-i)-em-^ufcv'0)-efc^ o 

[0581] J£JLk, (5-l)~(5-6NCJ:tK #a = a(0), — , a(n-l)^ol>Ta<D£rCOf&fiF.^ 

[0582] |H72T^-r^r^J{-oV vCB"*.tf, <<^7 ! yt?W&B.& (L>— ^IHB'J#-^-5) CD 
WiE^W— Ktt, (0, 4), (1, 3), (2, 0), (3, 1), (4, 1) -C&5 0 TfefcalSyT^y^S 

78WSiJ#-^ll)i:-t"5fc, AP(a, al) = (3, 0)X*fe<9, kl = level(AP(a, a 
1)) = 3-Cfc5 0 aCO^fiE/^y— KC05^1^"</^^kl = 3i«9/J^VHO, 4), (1, 3), (2, 
0)^oV^«^tu^fJ^'fifif*. Jb8E^^y^'(5-3)-Ctfj)t"C#5(072, E]75# 

flg). w^uaski = 3<DmU'*xy— K(3, l)CD#J^fitte(5-2)-rff-iW3( 

12174, g|75#Rg) 0 £fc, W^/V^kl = 3J;9^V>(4, l)fCOV^T^7 i ^7 0 (5- 1 
)-eH-»t?#5(IH74, E75#flg). 
W ( 1 ) ~ ( 5) CD mU ^X<0, ^LfcttEW*©^^kSrff5fc«>^ % H 

■ 

-St. llll^lC^y±jCfiy**t'*^3ldS&5S»^;<Oj»cW:, (N/m)+mt&5 0 m = V" 
N£i~ 5i\ (N/m)+m = 2-V~Ni:Jfc»)» >&W£*^M&V>**- y^N^h^NicWM 
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[0583] <5-5. mm^mmsi^m^f— #\zj&>fr— mkw-#> 

[0584] fes^rapgiia^Tuttt, ^ijffl^«5Hi, Mmmmn<Dm\z.mmistci^ 

[0586] ftiC<D3£^acol ^(D^^SE^^^— ^tC^tbStt^V 2 '— ^^^^ 

(titsip®, lr^^tg), mmm®) «au i =i, n) 

leveKP(D), — , level(P(n)) 

[0587] ^fcilffif«*io©^3Ki*^*5»t5V"</V' (#**E*rC3R$;fx5) £ WvfttfMV 
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a, S3102a, S3 103a, S3104a, S3 105a, S3 106a) „ 

[0589] H773tt^078H^-r«t5lt, $>Z>M&Mm<£>MfrM$)*<z>V— 7<Dlokl, 

fc,flJffl#^mB£^M^b^jl(l^^ST(6)(D|H5^STl(6)<Dy— ^tC#j«9^T 
£>*l/CV^i:£te, airbcO-a-^t^^V— KR(6), a<Db^£5IgfiL&rtV— KR(5)t£#5C9 

[0590] El77te, ia780i5^^)"ll^^*^y^$^C^t!ll{-*3V^X > lotf»li#: 

^*ST(n)£tt tti Lfct <D X&>Z> 0 
[0591] /V- hR(n-l)fc£, mikM%0*ST(n- l)£Jl[lt&^*ST(n)K*ii-r5/-K 

l^/Mf$&(L, TID(n-l), k(n-l)) 
l^/Vftindex 0 

&©1t$&((L, TIDCn-l), k(n-l)), 0) 

[0592] £fc, gP^7^STl(n)C0/V— hRl(n)te, 
U^<Mnm(.R, TlD(n-l), kl(n)) 
V^yVf^g index 1 

^©W^((R, TID(n-l), kl(n)), 1) 
-t-fo«9. kl(n)teSTKn) <D?Si&XtbZ> 0 

[0593] *fc, ^^STl(n)^§8br{i, A— h Rl(n)^(7V-K^O^Tte\ 
1/-<M##(R, TID(n), j) 



1 
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hRl(n)W^<^y— K©flfcfiW«H:((R, TID(n), j), i) -?fc5 0 
[0594] Cr-C, j. itt#ftftSEj>rC*>9» leafs(STl(n))<^^-^mO{4gtf #f4((R. TID(n), 0), i 

[0595] *fc, R(n){*JlH^^*ST(n)^ST(n+ DtC^il-r^y— K-C, 
V<Mfif$8(L, TID(n), k(n)) 
l^^/l^rtindex 0 

te©t*$B ((L, TID(n), k(n)), 0)(ffiU k(n) - kl(n)+lkirZ>) 
m m filV(R(n)) = h(V(R(n - 1)) || V(Rl(n))) 

*fc, )l|M^^^J/J^STl(n)i:/>— hR(n-l), /V— hR(n)^b&£— #*£ST(n)£# 

<o HP*,. 
root(ST(n)) = R(n\ 
leftChild(R(n)) = R(n-l), 
rightChild(R(n)) = Rl(n) 0 

[0596] mnm i <DMmm m i^/s^siR^ra* ttST(n)-e*>5. 

[0597] -tfiU n - OWbTtt, R(n- l)<Dft*>9l2:0f^*l^flitSr«fofc/— KlRSrfflV>S 

(H78#fl8)„ iR^jiiffiiiia, -l. o), o) -ea>3o 

[0598] ~<Dt#, 2o© fc^Sv^vif ^^(^jiM^< <^<DJ;5^^tt-t-^o 

[0599] Vjl, j2, Tl, T2 ^ 0 [(R, T2, j2) < < (L, Tl, jl)] „ 

Vjl, j2, Tl, T2 ^ 0 [Tl < T2 => (L, Tl, jl) < < (L, T2, j2)L 
Vjl, j2, Tl ^ 0 [jl < j2 => (R, Tl. jl) < < (R, Tl, j2)]„ 

[0600] z.(Dfemfc£K>, r^i8#< < ttttftofitib&oBtE/W— Kw*^»all»»H 

[0601] 079tt, i©j£|g&lxfc2>g§§0S< ^fflwctt^S?*— ^KiS^/M— MfiSr 

[0602] <£Mfit$B((R, 10, 0), 5) (DS—b'lZ.ttVX, BPNMS^T*— 
[(((L, 9, k(9)), 0), L, V(R(9))), 
(((R, 10, 2), 0) , L, V((R, 10, 2), 0)), 
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(((R, 10, 0), 4), L, V((R, 10, 0), 4))] 

btto w£-e(R. io, 2)< < (l, 9, io) -efe^o 

[0603] Ili^f-^li, K((R, 10, 1), 3), R, V((R, 10, 1), 3))] 
[0604] (l)fiP(^ffi^— ?<D&mm%L?y%&'OZ.b&?-^y?'tZ> -> 

(3) IPR^M^^-^^iiMM^^-^^^-rs 

[(((L, 9, k(9)), 0), L, V(R(9))), 
(((R, 10, 2), 0), L, V((R, 10, 2), 0)), 
(((R, 10, 0), 4), L, V((R, 10, 0), 4)), 
(((R, 10, 1), 3), R, V((R, 10, 1), 3))] 

[0605] (4) &ww%z(d*p w</nt ^b&mm-rz — 

[(((R, 10, 0), 4), L, V((R, 10, 0), 4)), 
(((R, 10, 1), 3), R, V((R, 10, 1), 3)), 
(((R, 10, 2), 0), L, V((R, 10, 2), 0)), 
(((L, 9, k(9)), 0), L, V(R(9)))] 

b?£Z>o 

[0606] (6)XTv7>(5)<Dy—h<Dlfem$: 

0(0), LR(0), V(0)), 0(k-l), LR(k-l), V(k-l)) 

W(0), W(l), — , W(k-1), W(k) 

[0607] (i) W(0) = V(0) 

(ii)LR(j) = L(Db%, WO+D = h(V(j) || W(j)) 
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LR(j) = R <Db%, WO+D = h(W(j) || V(j)) 

[0608] W(0) = V((R, 10, 0), 5), 

W(l) = h(V((R, 10, 0), 4) || V((R, 10, 0), 5) ), 

W(2) = h(W(l) || V((R, 10, 1), 3)), 

W(3) = h(V((R, 10, 2), 0) || W(2)), 

W(4) = h(V(R(9)) || W(3)) 
ktt&o W(3) = V(R1(10)), W(4) = V(R(10))-Cfc5o 
[0609] fot, m5(DMM<DMM(D4^>hm^niEW^y L ^200a{ZXtlit, fg4<DMM 

[0610] £fc, is-T^ffi^m.*)^ mWfo&<Dy s -?m$'Pti: 

[06ii] */t % mm#mm5uz&tf%4>?v*i/?;^±ik® i mi~^^xh, mw\%±it 

mm^^^xh^xh. ^?v*is?/u$e£:'fk&ftoz.b&x%z>(Dx. mm^m 
m5i<D&mf£^v&&±m\zM / p&-&z>z.b&x%z>o 
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[0612] m^mmmtmrm^^^xtt, nmrnmrnsita. -otv^*^^ 
[06i4] £fc % nRg-mmixnsm. — ^mmmm^rttiK. mm^uiaxma^mm 



[0615] <\m&M%)*<D&K> 

[06i6] mikMifo^ov— ^#-^i^ov^-c, i-e»j$ns)ii^^j^^y— ^i-ni^fij^ 



[0617] 4". ¥^iJffi#SM, £,£1£^£^U iOHlSriO < il&5ZlocDjiI#c^j;f:y 

— ym^t^vounAm^^^Xm^^MUm^^^ ^ i*round(il)K:fcV^ 

[06i8] (Dmm&cvm^mi.. bp*>/-k(o, ii)<Dgpf$«^~*t£i^*v5 0 
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[0619] (2) ±mtm&$ti, nt&z. roundQDmrm^v— 7(0, mm-rzmikMm 

/h7t£ST2£U (0, i0)<DST2lC&(t3f&iIE^;*£rauthPathST2(0 > iO))£Lfct£\ auth 
PathST2(0, mizmiTZy— KT\ V-</V^j'J;«9/J^v^(D}C*J-r^SiJ^fii:(-i. /— K 

[0620] IP*>, il ^ \2b~rZ>K authPathST2(0, iO))tCjg-T£y— KT% U"</VaSf £*?/h£Wt> 
0>lE*f-i'3$lJ^tett:» immedData(iO)£>5V ^}£lateData(iO, i2)(^^*nS 0 

[0621] (3)ST2^^o(t5y— 7(0, i0)<D/l— W^£rrtPathST2(0, i0)£bfci#, _hfaf&KE 
,^(D#J ^'fil:^.t5lCrtPathST2(0, iOMir^/--h^U-</^mmU^<DU-</UX , 0^ 

£vv— koWSIIM:, y-K(o, io-esaiEPj#^aufcfijffl#^, y— K(o, ii) 

[0622] (ttK<D5EW) 

[0623] (1){COV^HI80, 08lS:fflV^oSiW'f*5o 

[0624] (^a-l)^tO^, 08O£#mU-C, i0i:il^iil^^^i3{t5)II^^^7^-V'^M^|(D 

^-V"</VKt?fc5^1E^«r(j', i')t*3< 0 K(0, il) ©HS^^/J^ST2^*5(t5 
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